openSUSE Security Update : djvulibre (openSUSE-2021-759)

This update for djvulibre fixes the following issues : - CVE-2021-32490 bsc1185895: Out of bounds write in function DJVU:filterbv via crafted djvu file - CVE-2021-32491 bsc1185900: Integer overflow in function render in tools/ddjvu via crafted djvu file - CVE-2021-32492 bsc1185904: Out of bounds...

[ASA-202105-18] djvulibre: arbitrary code execution

Arch Linux Security Advisory ASA-202105-18 ========================================== Severity: Medium Date : 2021-05-25 CVE-ID : CVE-2021-3500 CVE-2021-32490 CVE-2021-32491 CVE-2021-32492 CVE-2021-32493 Package : djvulibre Type : arbitrary code execution Remote : No Link :...

openSUSE: Security Advisory for djvulibre (openSUSE-SU-2021:0759-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:0759-1 Security update for djvulibre

This update for djvulibre fixes the following issues: - CVE-2021-32490 bsc1185895: Out of bounds write in function DJVU:filterbv via crafted djvu file - CVE-2021-32491 bsc1185900: Integer overflow in function render in tools/ddjvu via crafted djvu file - CVE-2021-32492 bsc1185904: Out of bounds...

Security update for djvulibre (important)

openSUSE Security Update: Security update for djvulibre Announcement ID: openSUSE-SU-2021:0759-1 Rating: important References: 1185895 1185900 1185904 1185905 Cross-References: CVE-2021-32490 CVE-2021-32491 CVE-2021-32492 CVE-2021-32493 CVSS scores: CVE-2021-32490 SUSE: 7.5...

Exploit for Code Injection in Exiftool_Project Exiftool

POC-CVE-2021-22204 https://nvd.nist.gov/vuln/detail/CVE-2021-...

SUSE SLES12 Security Update : djvulibre (SUSE-SU-2021:1645-1)

This update for djvulibre fixes the following issues : Security issues fixed : CVE-2021-32491 bsc1185900: Integer overflow in function render in tools/ddjvu via crafted djvu file CVE-2021-32492 bsc1185904: Out of bounds read in function DJVU:DataPool:hasdata via crafted djvu file CVE-2021-32493...

SUSE SLED15 / SLES15 Security Update : djvulibre (SUSE-SU-2021:1641-1)

This update for djvulibre fixes the following issues : CVE-2021-32490 bsc1185895: Out of bounds write in function DJVU:filterbv via crafted djvu file CVE-2021-32491 bsc1185900: Integer overflow in function render in tools/ddjvu via crafted djvu file CVE-2021-32492 bsc1185904: Out of bounds read i...

SUSE SLES15 Security Update : djvulibre (SUSE-SU-2021:1649-1)

This update for djvulibre fixes the following issues : Security issues fixed : CVE-2021-32490 bsc1185895, Out of bounds write in function DJVU:filterbv via crafted djvu file CVE-2021-32491 bsc1185900, Integer overflow in function render in tools/ddjvu via crafted djvu file CVE-2021-32492...

SUSE-SU-2021:1649-1 Security update for djvulibre

This update for djvulibre fixes the following issues: Security issues fixed: - CVE-2021-32490 bsc1185895, Out of bounds write in function DJVU:filterbv via crafted djvu file - CVE-2021-32491 bsc1185900, Integer overflow in function render in tools/ddjvu via crafted djvu file - CVE-2021-32492...

SUSE-SU-2021:1645-1 Security update for djvulibre

This update for djvulibre fixes the following issues: Security issues fixed: - CVE-2021-32491 bsc1185900: Integer overflow in function render in tools/ddjvu via crafted djvu file - CVE-2021-32492 bsc1185904: Out of bounds read in function DJVU:DataPool:hasdata via crafted djvu file - CVE-2021-324...

SUSE-SU-2021:14728-1 Security update for djvulibre

This update for djvulibre fixes the following issues: Security issues fixed: - CVE-2021-32491 bsc1185900: Integer overflow in function render in tools/ddjvu via crafted djvu file - CVE-2021-32492 bsc1185904: Out of bounds read in function DJVU:DataPool:hasdata via crafted djvu file - CVE-2021-324...

SUSE-SU-2021:1641-1 Security update for djvulibre

This update for djvulibre fixes the following issues: - CVE-2021-32490 bsc1185895: Out of bounds write in function DJVU:filterbv via crafted djvu file - CVE-2021-32491 bsc1185900: Integer overflow in function render in tools/ddjvu via crafted djvu file - CVE-2021-32492 bsc1185904: Out of bounds...

Ubuntu: Security Advisory (USN-4957-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4957-2: DjVuLibre vulnerabilities

USN-4957-1 fixed several vulnerabilities in DjVuLibre. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that DjVuLibre incorrectly handled certain memory operations. If a user or automated system were tricked into processing a...

USN-4957-2 djvulibre vulnerabilities

USN-4957-1 fixed several vulnerabilities in DjVuLibre. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that DjVuLibre incorrectly handled certain memory operations. If a user or automated system were tricked into processing a...

Ubuntu 16.04 ESM : DjVuLibre vulnerabilities (USN-4957-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4957-2 advisory. USN-4957-1 fixed several vulnerabilities in DjVuLibre. This update provides the corresponding update for Ubuntu 16.04 ESM. Tenable has extracted the...

USN-4957-1 djvulibre vulnerabilities

It was discovered that DjVuLibre incorrectly handled certain memory operations. If a user or automated system were tricked into processing a specially crafted DjVu file, a remote attacker could cause applications to hang or crash, resulting in a denial of service, or possibly execute arbitrary co...

USN-4957-1: DjVuLibre vulnerabilities

It was discovered that DjVuLibre incorrectly handled certain memory operations. If a user or automated system were tricked into processing a specially crafted DjVu file, a remote attacker could cause applications to hang or crash, resulting in a denial of service, or possibly execute arbitrary co...

DjVuLibre 缓冲区错误漏洞

DjVuLibre is an open source implementation of DjVu computer file format that includes a DjVu file viewer, browser plug-in, DjVu file decoder/encoder and other utilities. A buffer error vulnerability exists in DjVuLibre. An attacker could cause application crashes and other consequences with a...