Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-5864-1
HistoryFeb 13, 2023 - 12:00 a.m.

Fig2dev vulnerabilities

2023-02-1300:00:00
ubuntu.com
30
fig2dev
ubuntu
cve-2019-14275
cve-2019-19555
cve-2019-19797
cve-2020-21529
cve-2020-21530
cve-2020-21531
cve-2020-21532
cve-2020-21533
cve-2020-21534
cve-2020-21535
cve-2020-21675
cve-2020-21676
cve-2021-3561
cve-2021-32280
denial of service

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.6%

JSON

Releases

  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM

Packages

  • fig2dev - Utilities for converting XFig figure files

Details

Frederic Cambus discovered that Fig2dev incorrectly handled certain image
files. If a user or an automated system were tricked into opening a certain
specially crafted input file, a remote attacker could possibly use this issue
to cause a denial of service. This issue only affected Ubuntu 18.04 LTS.
(CVE-2019-14275)

It was discovered that Fig2dev incorrectly handled certain image files. If
a user or an automated system were tricked into opening a certain specially
crafted input file, a remote attacker could possibly use this issue to cause
a denial of service. (CVE-2019-19555, CVE-2019-19797, CVE-2020-21529,
CVE-2020-21530, CVE-2020-21531, CVE-2020-21532, CVE-2020-21533,
CVE-2020-21534, CVE-2020-21535, CVE-2020-21675, CVE-2020-21676,
CVE-2021-3561)

It was discovered that Fig2dev incorrectly handled certain image files. If
a user or an automated system were tricked into opening a certain specially
crafted input file, a remote attacker could possibly use this issue to cause
a denial of service. (CVE-2021-32280)

OSVersionArchitecturePackageVersionFilename
Ubuntu20.04noarchfig2dev< 1:3.2.7a-7ubuntu0.1UNKNOWN
Ubuntu20.04noarchfig2dev-dbgsym< 1:3.2.7a-7ubuntu0.1UNKNOWN
Ubuntu18.04noarchtransfig< 1:3.2.6a-6ubuntu1.1UNKNOWN
Ubuntu18.04noarchfig2dev< 1:3.2.6a-6ubuntu1.1UNKNOWN
Ubuntu18.04noarchfig2dev-dbgsym< 1:3.2.6a-6ubuntu1.1UNKNOWN

Related

nessus 31
openvas 22
osv 4
debian 3
suse 10
mageia 2
debiancve 14
redhatcve 14
prion 14
cvelist 14
veracode 8
nvd 14
cve 14
ubuntucve 14
cnvd 11
fedora 6
amazon 4
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : Fig2dev vulnerabilities (USN-5864-1)
2023-02-13 00:00:00
Debian DLA-2778-1 : fig2dev - LTS security update
2021-10-10 00:00:00
SUSE SLES12 Security Update : transfig (SUSE-SU-2021:3585-1)
2021-10-30 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5864-1)
2023-02-14 00:00:00
Debian: Security Advisory (DLA-2778-1)
2021-10-05 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:14836-1)
2021-11-02 00:00:00
osv
osv
fig2dev vulnerabilities
2023-02-13 13:59:56
fig2dev - security update
2021-10-04 00:00:00
fig2dev - security update
2023-01-31 00:00:00
debian
debian
[SECURITY] [DLA 2778-1] fig2dev security update
2021-10-04 09:00:15
[SECURITY] [DLA 3304-1] fig2dev security update
2023-01-31 20:44:31
[SECURITY] [DLA 2073-1] transfig security update
2020-01-21 21:42:12
suse
suse
Security update for transfig (important)
2021-11-18 00:00:00
Security update for transfig (important)
2021-10-29 00:00:00
Security update for transfig (important)
2021-11-02 00:00:00
mageia
mageia
Updated transfig packages fix security vulnerability
2020-03-06 19:13:58
Updated transfig package fixes a security vulnerability
2021-07-27 23:21:53
debiancve
debiancve
CVE-2020-21533
2021-09-16 21:15:08
CVE-2019-19797
2019-12-15 20:15:11
CVE-2021-32280
2021-09-20 16:15:10
redhatcve
redhatcve
CVE-2019-19555
2020-02-07 15:44:32
CVE-2019-14275
2020-02-07 15:44:31
CVE-2020-21533
2021-09-17 18:35:08
prion
prion
Stack overflow
2019-12-04 17:16:00
Stack overflow
2019-07-26 04:15:00
Out-of-bounds
2019-12-15 20:15:00
cvelist
cvelist
CVE-2019-19555
2019-12-04 16:19:22
CVE-2019-14275
2019-07-26 03:16:12
CVE-2020-21675
2021-08-10 20:19:45
veracode
veracode
Denial Of Service (DoS)
2023-03-06 17:45:39
Denial Of Service (DoS)
2023-03-06 17:29:33
Denial Of Service (DoS)
2021-10-05 22:19:33
nvd
nvd
CVE-2019-19555
2019-12-04 17:16:44
CVE-2019-14275
2019-07-26 04:15:11
CVE-2021-32280
2021-09-20 16:15:10
cve
cve
CVE-2019-19555
2019-12-04 17:16:44
CVE-2019-14275
2019-07-26 04:15:11
CVE-2020-21676
2021-08-10 21:15:07
ubuntucve
ubuntucve
CVE-2020-21533
2021-09-16 00:00:00
CVE-2019-19797
2019-12-15 00:00:00
CVE-2019-14275
2019-07-26 00:00:00
cnvd
cnvd
fig2dev buffer overflow vulnerability (CNVD-2021-79776)
2019-12-06 00:00:00
fig2dev stack buffer overflow vulnerability (CNVD-2021-68461)
2021-08-11 00:00:00
fig2dev stack buffer overflow vulnerability
2021-09-17 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: transfig-3.2.8a-2.fc34
2021-06-07 01:16:34
[SECURITY] Fedora 33 Update: transfig-3.2.8a-2.fc33
2021-06-07 00:51:39
[SECURITY] Fedora 31 Update: xfig-3.2.7b-1.fc31
2020-01-25 06:36:43
amazon
amazon
Medium: transfig
2021-07-01 01:08:00
Medium: transfig
2023-07-20 17:30:00
Medium: transfig
2020-02-24 22:12:00

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.6%

JSON
Related for USN-5864-1
nessus31openvas22osv4debian3suse10mageia2debiancve14redhatcve14prion14cvelist14veracode8nvd14cve14ubuntucve14cnvd11fedora6amazon4