CVE-2019-20024
published 2019-12-27CVE-2019-20024: A heap-based buffer overflow was discovered in image_buffer_resize in fromsixel.c in libsixel before 1.8.4.
PriorityP426medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
EPSS
1.00%
59.3th percentile
A heap-based buffer overflow was discovered in image_buffer_resize in fromsixel.c in libsixel before 1.8.4.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | libsixel | < libsixel 1.8.6-1 (bookworm) | libsixel 1.8.6-1 (bookworm) |
| libsixel_project | libsixel | >= 0 < 1.8.6-1 | 1.8.6-1 |
| libsixel_project | libsixel | >= 0 < 1.8.6-1 | 1.8.6-1 |
| libsixel_project | libsixel | >= 0 < 1.8.6-1 | 1.8.6-1 |
| libsixel_project | libsixel | >= 0 < 1.8.6-1 | 1.8.6-1 |
| saitoha | libsixel | < 1.8.4 | 1.8.4 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv9.8CRITICAL
vendor_debian6.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-r283-3wm7-prjx: A heap-based buffer overflow was discovered in image_buffer_resize in fromsixel
ghsa_unreviewed·2022-05-24
CVE-2019-20024 [MEDIUM] GHSA-r283-3wm7-prjx: A heap-based buffer overflow was discovered in image_buffer_resize in fromsixel
A heap-based buffer overflow was discovered in image_buffer_resize in fromsixel.c in libsixel before 1.8.4.
OSV
italc vulnerabilities
osv·2020-09-28·CVSS 9.8
CVE-2019-15681 italc vulnerabilities
italc vulnerabilities
It was discovered that an information disclosure vulnerability existed in the
LibVNCServer vendored in iTALC when sending a ServerCutText message. An
attacker could possibly use this issue to expose sensitive information.
(CVE-2019-15681)
It was discovered that the LibVNCServer and LibVNCClient vendored in iTALC
incorrectly handled certain packet lengths. A remote attacker could possibly
use this issue to obtain sensitive information, cause a denial of service, or
execute arbitrary code.
(CVE-2018-15127 CVE-2018-20019, CVE-2018-20020, CVE-2018-20021, CVE-2018-20022,
CVE-2018-20023, CVE-2018-20024, CVE-2018-20748, CVE-2018-20749, CVE-2018-20750,
CVE-2018-7225, CVE-2019-15681)
OSV
CVE-2019-20024: A heap-based buffer overflow was discovered in image_buffer_resize in fromsixel
osv·2019-12-27·CVSS 6.5
CVE-2019-20024 [MEDIUM] CVE-2019-20024: A heap-based buffer overflow was discovered in image_buffer_resize in fromsixel
A heap-based buffer overflow was discovered in image_buffer_resize in fromsixel.c in libsixel before 1.8.4.
Debian
CVE-2019-20024: libsixel - A heap-based buffer overflow was discovered in image_buffer_resize in fromsixel....
vendor_debian·2019·CVSS 6.5
CVE-2019-20024 [MEDIUM] CVE-2019-20024: libsixel - A heap-based buffer overflow was discovered in image_buffer_resize in fromsixel....
A heap-based buffer overflow was discovered in image_buffer_resize in fromsixel.c in libsixel before 1.8.4.
Scope: local
bookworm: resolved (fixed in 1.8.6-1)
bullseye: resolved (fixed in 1.8.6-1)
forky: resolved (fixed in 1.8.6-1)
sid: resolved (fixed in 1.8.6-1)
trixie: resolved (fixed in 1.8.6-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-12-27
Published