Описание
A stack-based buffer under-read in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to image_load_bmp.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| htmldoc | fixed | 1.9.13-1 | package | |
| htmldoc | fixed | 1.9.11-4+deb11u1 | bullseye | package |
| htmldoc | fixed | 1.9.3-1+deb10u3 | buster | package |
Примечания
https://github.com/michaelrsweet/htmldoc/issues/444
https://github.com/michaelrsweet/htmldoc/commit/f12b9666e582a8e7b70f11b28e5ffc49ad625d43 (v1.9.13)
Crash in CLI tool, no security impact
EPSS
Связанные уязвимости
A stack-based buffer under-read in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to image_load_bmp.
A stack-based buffer under-read in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to image_load_bmp.
Buffer overflow vulnerability in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to image_load_bmp.
EPSS