CVE-2019-18804

Description

References

• lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html · Mailing List
• lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html · Mailing List
• TeamSeri0us/pocs · Exploit
• lists.debian.org/debian-lts-announce/2019/11/msg00004.html · Mailing List
• lists.debian.org/debian-lts-announce/2021/05/msg00022.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF
• sourceforge.net/p/djvu/bugs/309 · Exploit
• usn.ubuntu.com/4198-1 · Third Party Advisory
• debian.org/security/2021/dsa-5032 · Third Party Advisory

djvulibre의 다른 취약점

• CVE-2021-46312보통 6.5An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero.
• CVE-2021-46310보통 6.5An issue was discovered IW44Image.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero.
• CVE-2021-3630보통 5.5An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in DjVuText.cpp via a crafted djvu file which may lea…
• CVE-2021-3500높음 7.8A flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument::get_djvu_file() via crafted djvu file may…
• CVE-2021-32493높음 7.8A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode() via crafted djvu file may lead …