Lucene search
K

507 matches found

Cvelist
Cvelist
added 2022/01/12 8:12 p.m.12 views

CVE-2021-37529

A double-free vulnerability exists in fig2dev through 3.28a is affected by: via the freestream function in readpics.c, which could cause a denial of service context-dependent...

5.7AI score0.00248EPSS
Exploits1References1
AlpineLinux
AlpineLinux
added 2022/01/12 8:12 p.m.19 views

CVE-2021-37529

A double-free vulnerability exists in fig2dev through 3.28a is affected by: via the freestream function in readpics.c, which could cause a denial of service context-dependent...

5.5CVSS6.8AI score0.00248EPSS
Exploits1
CVE
CVE
added 2022/01/12 8:12 p.m.68 views

CVE-2021-37529

CVE-2021-37529 affects fig2dev up to version 3.28a. The vulnerability is a double-free in the free_stream function of readpics.c (due to freeing memory for long file names), which can lead to denial of service. Various sources (Red Hat, SUSE, OSV entries, and vendor advisories) report this issue ...

5.5CVSS5.4AI score0.00248EPSS
Exploits1References1Affected Software1
Debian CVE
Debian CVE
added 2022/01/12 8:12 p.m.25 views

CVE-2021-37529

A double-free vulnerability exists in fig2dev through 3.28a is affected by: via the freestream function in readpics.c, which could cause a denial of service context-dependent...

5.5CVSS5.4AI score0.00248EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2021/10/30 12:0 a.m.24 views

openSUSE 15 Security Update : transfig (openSUSE-SU-2021:3584-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3584-1 advisory. - fig2dev 3.2.7b contains a stack buffer overflow in the bezierspline function in genepic.c. CVE-2020-21529 - fig2dev 3.2.7b contains a...

5.5CVSS6.5AI score0.00498EPSS
Exploits12References37
OSV
OSV
added 2021/10/19 11:3 a.m.2 views

OESA-2021-1395 transfig security update

The transfig utility creates a makefile which translates FIG created by xfig or PIC figures into a specified LaTeX graphics language for example, PostScriptTM. Transfig is used to create TeX documents which are portable i.e., they can be printed in a wide variety of environments. Security Fixes: ...

5.5CVSS7AI score0.00108EPSS
Exploits1References2
Veracode
Veracode
added 2021/10/11 10:43 a.m.27 views

Denial Of Service (DoS)

fig2dev is vulnerable to denial of service. The vulnerability exists due to a stack buffer overflow in the genptktext component in genptk.c...

5.5CVSS3.9AI score0.00619EPSS
Exploits1References4Affected Software2
Tenable Nessus
Tenable Nessus
added 2021/10/10 12:0 a.m.25 views

Debian DLA-2778-1 : fig2dev - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2778 advisory. Multiple security vulnerabilities have been discovered in fig2dev, utilities for converting XFig figure files. Buffer overflows, out-of-bounds reads and NULL point...

7.1CVSS6AI score0.00678EPSS
Exploits12References27
Veracode
Veracode
added 2021/10/05 10:19 p.m.17 views

Denial Of Service (DoS)

fig2dev:stretch is vulnerable to denial of service. The vulnerability exists because readcolordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write...

5.5CVSS2.6AI score0.00462EPSS
Exploits1References7Affected Software2
Veracode
Veracode
added 2021/10/05 10:17 p.m.18 views

Denial Of Service (DoS)

fig2dev is vulnerable to denial of service. The vulnerability exists due to a NULL pointer dereference that exists in the function computeclosedspline located in transspline.c...

5.5CVSS2.9AI score0.00108EPSS
Exploits1References5Affected Software2
OpenVAS
OpenVAS
added 2021/10/05 12:0 a.m.31 views

Debian: Security Advisory (DLA-2778-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS5.9AI score0.00678EPSS
Exploits12References4
Debian
Debian
added 2021/10/04 9:0 a.m.35 views

[SECURITY] [DLA 2778-1] fig2dev security update

Debian LTS Advisory DLA-2778-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 04, 2021 https://wiki.debian.org/LTS Package : fig2dev Version : 1:3.2.6a-2+deb9u4 CVE ID : CVE-2019-19797 CVE-2020-21529 CVE-2020-21530 CVE-2020-21531 CVE-2020-21532...

7.1CVSS6.3AI score0.00678EPSS
Exploits12
OSV
OSV
added 2021/10/04 12:0 a.m.20 views

DLA-2778-1 fig2dev - security update

Bulletin has no description...

7.1CVSS6AI score0.00678EPSS
Exploits12
Veracode
Veracode
added 2021/09/20 11:59 p.m.7 views

Denial Of Service (DoS)

fig2dev is vulnerable to denial of service. It contains a stack buffer overflow in the bezierspline function in genepic.c...

5.5CVSS6.9AI score0.00492EPSS
Exploits1References4Affected Software2
Veracode
Veracode
added 2021/09/20 11:58 p.m.5 views

Denial Of Service (DoS)

fig2dev is vulnerable to denial of service. The vulnerability exists due to a global buffer overflow in the convpatternindex function in gencgm.c...

5.5CVSS6.9AI score0.00496EPSS
Exploits1References4Affected Software2
Veracode
Veracode
added 2021/09/20 11:58 p.m.5 views

Denial Of Service (DoS)

fig2dev is vulnerable to denial of service. The vulnerability exists due to a global buffer overflow in the setfigfont function in genepic.c...

5.5CVSS6.9AI score0.00496EPSS
Exploits1References4Affected Software2
OSV
OSV
added 2021/09/20 4:15 p.m.1 views

DEBIAN-CVE-2021-32280

An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function computeclosedspline located in transspline.c. It allows an attacker to cause Denial of Service. The fixed version of fig2dev is 3.2.8...

5.5CVSS6.2AI score0.00108EPSS
Exploits1References1
OSV
OSV
added 2021/09/20 4:15 p.m.1 views

CVE-2021-32280

An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function computeclosedspline located in transspline.c. It allows an attacker to cause Denial of Service. The fixed version of fig2dev is 3.2.8...

5.5CVSS5.5AI score
Exploits0References4
NVD
NVD
added 2021/09/20 4:15 p.m.11 views

CVE-2021-32280

An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function computeclosedspline located in transspline.c. It allows an attacker to cause Denial of Service. The fixed version of fig2dev is 3.2.8...

5.5CVSS0.00108EPSS
Exploits1References4
UbuntuCve
UbuntuCve
added 2021/09/20 4:15 p.m.28 views

CVE-2021-32280

An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function computeclosedspline located in transspline.c. It allows an attacker to cause Denial of Service. The fixed version of fig2dev is 3.2.8...

5.5CVSS6.7AI score0.00108EPSS
Exploits1References4
Rows per page
Query Builder