USN-4819-1
Dashboard / Vulnerabilities / USN-4819-1
USN-4819-1
Summary: leptonlib vulnerabilities
Details: It was discovered that Leptonica incorrectly handled path names. An attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 ESM. (CVE-2017-18196) It was discovered that Leptonica incorrectly handled certain input arguments. An attacker could possibly use this issue to execute arbitrary commands. (CVE-2018-3836) It was discovered that Leptonica incorrectly handled input arguments. An attacker could possibly use this issue to cause a denial of service or other unspecified impact. (CVE-2018-7186)
References: https://ubuntu.com/security/notices/USN-4819-1, https://ubuntu.com/security/CVE-2017-18196, https://ubuntu.com/security/CVE-2018-3836, https://ubuntu.com/security/CVE-2018-7186
Affected packages
Package
Name: leptonlib
Purl: pkg:deb/ubuntu/leptonlib?arch=source&distro=trusty%2Fesm
Affected ranges
Type: ECOSYSTEM
Events:
