Search CVE reports


Toggle filters

31 – 32 of 32 results


CVE-2018-16140

Medium priority

Some fixes available 2 of 4

A buffer underwrite vulnerability in get_line() (read.c) in fig2dev 3.2.7a allows an attacker to write prior to the beginning of the buffer via a crafted .fig file.

2 affected packages

transfig, fig2dev

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
transfig Not in release Not in release Not in release Not in release
fig2dev Not affected Not affected Not affected Needs evaluation
Show less packages

CVE-2017-16899

Low priority
Ignored

An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a maliciously crafted Fig format file, related to a negative font value in...

2 affected packages

fig2dev, transfig

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
fig2dev Not affected
transfig Not in release
Show less packages