CVE-2019-18604

In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled...

USN-6695-1: TeX Live vulnerabilities

It was discovered that TeX Live incorrectly handled certain memory operations in the embedded axodraw2 tool. An attacker could possibly use this issue to cause TeX Live to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS. CVE-2019-18604 It was discovered that TeX...

[SECURITY] [DLA 3427-2] texlive-bin regression update

Debian LTS Advisory DLA-3427-2 [email protected] https://www.debian.org/lts/security/ Markus Koschany May 31, 2023 https://wiki.debian.org/LTS Package : texlive-bin Version : 2018.20181218.49446-1+deb10u2 CVE ID : CVE-2019-18604 Debian Bug : 1036891 It was discovered that the patch to f...

CVE-2019-18604

In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled...

CVE-2019-18604

CVE-2019-18604 affects axohelp in axodraw2 (axohelp.c before 1.3; axodraw2 before 2.1.1b) as distributed in TeX Live and similar collections. The root cause is mishandling of sprintf, which Debian notes can lead to a stack overflow. Several connected advisories confirm affected packages and patch...

CVE-2019-18604

In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled...