Debian/fig2dev: high 7.8
A buffer underwrite vulnerability in get_line() (read.c) in fig2dev 3.2.7a allows an attacker to write prior to the beginning of the buffer via a crafted .fig file.
Action: Upgrade fig2dev to 1:3.2.7a-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:3.2.7a-3 | - |
Fixed versions
| 1:3.2.7a-3 |
Sources
- osv: DEBIAN-CVE-2018-16140#Debian:13/fig2dev
- https://security-tracker.debian.org/tracker/CVE-2018-16140
published · modified · JSON