Lucene search
+L

593 matches found

OpenVAS
OpenVAS
•added 2023/02/01 12:00 a.m.•19 views

Debian: Security Advisory (DLA-3304-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.7AI score0.0109EPSS
SaveExploits5References4
Debian
Debian
•added 2023/01/31 8:44 p.m.•113 views

[SECURITY] [DLA 3304-1] fig2dev security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3304-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk [email protected] January 31, 2023 https://wiki.debian.org/LTS -...

5.5CVSS6.4AI score0.0109EPSS
SaveExploits5
OSV
OSV
•added 2023/01/31 12:00 a.m.•36 views

DLA-3304-1 fig2dev - security update

Bulletin has no description...

5.5CVSS5.7AI score0.0109EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
•added 2023/01/31 12:00 a.m.•33 views

Debian dla-3304 : fig2dev - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3304 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3304-1 [email protected]...

5.5CVSS6.5AI score0.0109EPSS
SaveExploits5References12
BDU FSTEC
BDU FSTEC
•added 2022/04/11 12:00 a.m.•18 views

The vulnerability of the put_font function in the genpict2e.c component of the Fig2dev file conversion utility, related to copying buffers without checking the input data, allows a malicious actor to cause service failures.

The vulnerability of the putfont function in the genpict2e.c component of the Fig2dev file conversion utility is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause service interruptions by converting xfig files into pict2e...

7.1CVSS5.8AI score0.00699EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/04/11 12:00 a.m.•14 views

The vulnerability of the set_fill function in the genge.c component of the Fig2dev file conversion utility allows a attacker to cause a service failure.

The vulnerability of the setfill function in the genge.c component of the Fig2dev file conversion utility is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure by converting the xfig file into the ge forma...

7.1CVSS6.5AI score0.00849EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/04/11 12:00 a.m.•16 views

The vulnerability of the get_line function in the read.c component of the Fig2dev file-formatting utility allows a attacker to cause a service failure.

The vulnerability of the getline function in the read.c component of the Fig2dev file conversion utility is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure remotely...

7.1CVSS6.5AI score0.00866EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/04/11 12:00 a.m.•21 views

The vulnerability in the `read_objects` function of the `read.c` component of the .fig Fig2dev file conversion utility allows a attacker to cause a service failure.

The vulnerability of the readobjects function in the read.c component of the .fig conversion utility Fig2dev involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

7.1CVSS6.8AI score0.00716EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/04/11 12:00 a.m.•14 views

The vulnerability in the read_textobject function of the read.c component of the .fig Fig2dev file conversion utility allows a attacker to cause a service failure.

The vulnerability of the readtextobject function in the read.c component of the Fig2dev file conversion utility is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

7.1CVSS6.8AI score0.00866EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/04/05 12:00 a.m.•18 views

The vulnerability of the conv_pattern_index function in the gencgm.c component of the Fig2dev file conversion tool allows a attacker to cause a service failure.

The vulnerability of the convpatternindex function in the gencgm.c component of the .fig Fig2dev file conversion tool is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

7.1CVSS6.2AI score0.01053EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/04/05 12:00 a.m.•18 views

The vulnerability of the setfigfont function in the genepic.c component of the .fig Fig2dev file conversion utility allows a attacker to cause a service failure.

The vulnerability of the setfigfont function in the genepic.c component of the .fig conversion tool for files with the .fig extension in Fig2dev relates to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause service interruptions...

7.8CVSS6.4AI score0.01078EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/04/05 12:00 a.m.•16 views

The vulnerability of the set_color function in the genge.c component of the Fig2dev file conversion utility allows a hacker to cause a service failure.

The vulnerability of the setcolor function in the genge.c utility for converting .fig files in Fig2dev involves copying buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to cause a service failure by converting the xfig file into the ge format...

7.8CVSS6.6AI score0.00721EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/04/05 12:00 a.m.•16 views

The vulnerability of the `shade_or_tint_name_after_declare_color` function in the `genpstricks.c` component, a utility for converting .fig files with the .fig2dev extension, allows a malicious actor to cause a service failure.

The vulnerability of the shadeortintnameafterdeclarecolor function in the genpstricks.c component, a utility for converting .fig files in the Fig2dev format, involves copying buffers without checking input data. Exploiting this vulnerability allows an attacker to cause service failure by converti...

7.1CVSS6.5AI score0.00778EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/04/05 12:00 a.m.•18 views

The vulnerability of the put_arrow() function in the genpict2e.c component of the Fig2dev file conversion utility allows a hacker to cause a service failure.

The vulnerability of the putarrow function in the genpict2e.c component of the Fig2dev file conversion utility is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to cause a service failure by converting an xfig file into the pict2e format...

7.1CVSS6.8AI score0.00778EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/04/01 12:00 a.m.•13 views

The vulnerability of the gencgm_start function in the gencgm.c component of the Fig2dev file conversion utility allows a attacker to cause a service failure.

The vulnerability of the gencgmstart function in the gencgm.c component of the Fig2dev file conversion tool is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.1CVSS7AI score0.00891EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/04/01 12:00 a.m.•15 views

The vulnerability of the genmp_writefontmacro_latex function in the genmp.c component of the Fig2dev file conversion utility allows a hacker to cause a service failure.

The vulnerability of the genmpwritefontmacrolatex function in the genmp.c component of the xfig conversion utility for .fig files in Fig2dev relates to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure by converting...

7.1CVSS5.8AI score0.00661EPSS
SaveExploits1References5Affected Software2
OSV
OSV
•added 2022/01/28 11:04 a.m.•24 views

OESA-2022-1509 transfig security update

The transfig utility creates a makefile which translates FIG created by xfig or PIC figures into a specified LaTeX graphics language for example, PostScriptTM. Transfig is used to create TeX documents which are portable i.e., they can be printed in a wide variety of environments. Security Fixes: ...

5.5CVSS6.8AI score0.00748EPSS
SaveExploits2References3
RedhatCVE
RedhatCVE
•added 2022/01/24 7:52 p.m.•46 views

CVE-2021-37530

A flaw was found in fig2dev in the openstream function of 'readpics.c'. This flaw allows a local attacker to pass a crafted file to fig2dev, causing a segmentation fault SEGV that can lead to a denial of service...

5.5CVSS3.3AI score0.00748EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2022/01/24 7:52 p.m.•45 views

CVE-2021-37529

A double-free vulnerability was found in fig2dev in the freestream function of 'readpics.c'. This issue occurs due to freeing the memory for long file names. This flaw allows an attacker to pass a crafted file to fig2dev, causing a double-free fault that can lead to a denial of service...

5.5CVSS4.7AI score0.00748EPSS
SaveExploits1References3
Veracode
Veracode
•added 2022/01/19 7:26 p.m.•28 views

Denial Of Service (DoS)

fig2dev is vulnerable to a denial of service. The vulnerability exists in openstream in the readpics.c which allows the attacker to pass a crafted file...

5.5CVSS3.6AI score0.00748EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder