USN-5961-1

Dashboard / Vulnerabilities / USN-5961-1

USN-5961-1

Summary: abcm2ps vulnerabilities

Details: It was discovered that abcm2ps incorrectly handled memory when parsing specially crafted ABC files. An attacker could use this issue to cause abcm2ps to crash, leading to a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 LTS. (CVE-2018-10753, CVE-2018-10771, CVE-2019-1010069) Chiba of Topsec Alpha Lab discovered that abcm2ps incorrectly handled memory when parsing specially crafted ABC files. An attacker could use this issue to cause abcm2ps to crash, leading to a denial of service. (CVE-2021-32434, CVE-2021-32435, CVE-2021-32436)

References: https://ubuntu.com/security/notices/USN-5961-1, https://ubuntu.com/security/CVE-2018-10753, https://ubuntu.com/security/CVE-2018-10771, https://ubuntu.com/security/CVE-2019-1010069, https://ubuntu.com/security/CVE-2021-32434, https://ubuntu.com/security/CVE-2021-32435, https://ubuntu.com/security/CVE-2021-32436