Debian: Security Advisory (DLA-3304-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3304-1] fig2dev security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3304-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk [email protected] January 31, 2023 https://wiki.debian.org/LTS -...

DLA-3304-1 fig2dev - security update

Bulletin has no description...

Debian dla-3304 : fig2dev - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3304 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3304-1 [email protected]...

Fig2dev set_fill Heap Buffer Overflow DoS

The vulnerability of the setfill function in the genge.c component of the Fig2dev file conversion utility is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure by converting the xfig file into the ge forma...

Fig2dev put_font Buffer Overflow DoS

The vulnerability of the putfont function in the genpict2e.c component of the Fig2dev file conversion utility is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause service interruptions by converting xfig files into pict2e...

fig Fig2dev File Conversion Buffer Overflow DoS

The vulnerability of the readtextobject function in the read.c component of the Fig2dev file conversion utility is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

Fig2dev get_line Heap Buffer Overflow DoS

The vulnerability of the getline function in the read.c component of the Fig2dev file conversion utility is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure remotely...

.fig Fig2dev Heap Buffer Overflow DoS

The vulnerability of the readobjects function in the read.c component of the .fig conversion utility Fig2dev involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

genpstricks.c Heap Buffer Overflow DoS

The vulnerability of the shadeortintnameafterdeclarecolor function in the genpstricks.c component, a utility for converting .fig files in the Fig2dev format, involves copying buffers without checking input data. Exploiting this vulnerability allows an attacker to cause service failure by converti...

Fig2dev put_arrow() DoS

The vulnerability of the putarrow function in the genpict2e.c component of the Fig2dev file conversion utility is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to cause a service failure by converting an xfig file into the pict2e format...

fig Fig2dev Heap Buffer Overflow DoS

The vulnerability of the setfigfont function in the genepic.c component of the .fig conversion tool for files with the .fig extension in Fig2dev relates to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause service interruptions...

gencgm.c Component Conv Pattern Index DoS

The vulnerability of the convpatternindex function in the gencgm.c component of the .fig Fig2dev file conversion tool is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

Fig2dev set_color Heap Buffer Overflow DoS

The vulnerability of the setcolor function in the genge.c utility for converting .fig files in Fig2dev involves copying buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to cause a service failure by converting the xfig file into the ge format...

gencgm.c Component Heap Buffer Overflow DoS

The vulnerability of the gencgmstart function in the gencgm.c component of the Fig2dev file conversion tool is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

genmp.c Heap Buffer Overflow DoS

The vulnerability of the genmpwritefontmacrolatex function in the genmp.c component of the xfig conversion utility for .fig files in Fig2dev relates to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure by converting...

OESA-2022-1509 transfig security update

The transfig utility creates a makefile which translates FIG created by xfig or PIC figures into a specified LaTeX graphics language for example, PostScriptTM. Transfig is used to create TeX documents which are portable i.e., they can be printed in a wide variety of environments. Security Fixes: ...

CVE-2021-37530

A flaw was found in fig2dev in the openstream function of 'readpics.c'. This flaw allows a local attacker to pass a crafted file to fig2dev, causing a segmentation fault SEGV that can lead to a denial of service...

CVE-2021-37529

A double-free vulnerability was found in fig2dev in the freestream function of 'readpics.c'. This issue occurs due to freeing the memory for long file names. This flaw allows an attacker to pass a crafted file to fig2dev, causing a double-free fault that can lead to a denial of service...

Denial Of Service (DoS)

fig2dev is vulnerable to a denial of service. The vulnerability exists in openstream in the readpics.c which allows the attacker to pass a crafted file...