Lucene search
Veracode Vulnerability DatabaseVERACODE:22843HistoryApr 01, 2020 - 12:37 a.m.
Arbitrary Code Execution
2020-04-0100:37:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
0.002 Low
EPSS
Percentile
61.4%
texlive is vulnerable to arbitrary code execution. A buffer overflow in t1_check_unusual_charstring function in writet1.c allows an attacker to execute arbitrary code on the system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| texlive | eq | 2012__43.20130427_r30134.el7 | |
| texlive | eq | 2012__43.20130427_r30134.el7 |
References
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.8_release_notes/index
access.redhat.com/errata/RHSA-2020:1036
access.redhat.com/security/updates/classification/#moderate
github.com/TeX-Live/texlive-source/commit/6ed0077520e2b0da1fd060c7f88db7b2e6068e4c
lists.debian.org/debian-security-announce/2018/msg00230.html
usn.ubuntu.com/3788-1/
usn.ubuntu.com/3788-2/
www.debian.org/security/2018/dsa-4299
Related
fedora
fedora
[SECURITY] Fedora 29 Update: texlive-2018-20.fc29
2018-10-09 00:08:19
[SECURITY] Fedora 29 Update: texlive-base-20180414-24.fc29
2018-10-09 00:08:19
cve
cve
CVE-2018-17407
2018-09-23 21:29:00
openvas
openvas
Debian: Security Advisory (DSA-4299-1)
2018-09-20 00:00:00
Debian: Security Advisory (DLA-1514-1)
2018-09-23 00:00:00
Huawei EulerOS: Security Advisory for texlive (EulerOS-SA-2020-2567)
2020-12-15 00:00:00
nessus
nessus
openSUSE Security Update : texlive (openSUSE-2019-800)
2019-03-27 00:00:00
SUSE SLED15 / SLES15 Security Update : texlive (SUSE-SU-2018:3122-1)
2019-01-02 00:00:00
Fedora 29 : 7:texlive-base / 8:texlive (2018-1959097dfc)
2019-01-03 00:00:00
archlinux
archlinux
[ASA-201812-4] texlive-bin: arbitrary code execution
2018-12-08 00:00:00
ubuntucve
ubuntucve
CVE-2018-17407
2018-09-23 00:00:00
mageia
mageia
Updated texlive packages fix security vulnerability
2018-10-14 03:58:33
nvd
nvd
CVE-2018-17407
2018-09-23 21:29:00
debiancve
debiancve
CVE-2018-17407
2018-09-23 21:29:00
prion
prion
Buffer overflow
2018-09-23 21:29:00
ubuntu
ubuntu
Tex Live-bin vulnerability
2018-10-23 00:00:00
Tex Live vulnerabilities
2018-10-11 00:00:00
oraclelinux
oraclelinux
texlive security update
2020-04-06 00:00:00
amazon
amazon
Medium: texlive
2020-06-23 06:44:00
Medium: texlive
2020-07-14 02:48:00
redhatcve
redhatcve
CVE-2018-17407
2018-09-25 15:23:06
osv
osv
texlive-bin - security update
2018-09-22 00:00:00
texlive-bin - security update
2018-09-21 00:00:00
CVE-2018-17407
2018-09-23 21:29:00
redhat
redhat
(RHSA-2020:1036) Moderate: texlive security update
2020-03-31 09:11:10
suse
suse
Security update for texlive (important)
2018-10-18 00:10:47
Security update for texlive (important)
2018-10-04 15:11:03
cvelist
cvelist
CVE-2018-17407
2018-09-23 21:00:00
centos
centos
texlive security update
2020-04-08 20:02:29