CVE-2019-1010069 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Abcm2ps

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer6 documents5 sources
Severity
5.5MEDIUMNVD
OSV9.8
EPSS
0.3%
top 48.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Abcm2ps Project Abcm2psDebian Abcm2psMoinejf Abcm2ps+1 more
Timeline
PublishedJul 18
Latest updateMar 16

Description

moinejf abcm2ps 8.13.20 is affected by: Incorrect Access Control. The impact is: Allows attackers to cause a denial of service attack via a crafted file. The component is: front.c, function txt_add. The fixed version is: after commit commit 08aef597656d065e86075f3d53fda89765845eae.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages5 packages

▶CVEListV5moinejf/abcm2ps8.13.20 [fixed: after commit commit 08aef597656d065e86075f3d53fda89765845eae]
▶NVDmoinejf/abcm2ps8.13.20
▶debiandebian/abcm2ps< abcm2ps 8.14.2-0.1 (bookworm)
▶Debianabcm2ps_project/abcm2ps< 8.14.2-0.1+3
▶Ubuntuabcm2ps_project/abcm2ps< 7.8.9-1+deb9u1build0.18.04.1+3

Also affects: Debian Linux 9.0

🔴Vulnerability Details

3
OSV
abcm2ps vulnerabilities↗2023-03-16
▶
GHSA
GHSA-4mg4-q2f6-546p: moinejf abcm2ps 8↗2022-05-24
▶
OSV
CVE-2019-1010069: moinejf abcm2ps 8↗2019-07-18
▶

📋Vendor Advisories

2
Ubuntu
abcm2ps vulnerabilities↗2023-03-16
▶
Debian
CVE-2019-1010069: abcm2ps - moinejf abcm2ps 8.13.20 is affected by: Incorrect Access Control. The impact is:...↗2019
▶