USN-7189-1

Dashboard / Vulnerabilities / USN-7189-1

USN-7189-1

Summary: HTMLDOC vulnerabilities

Details: It was discovered that HTMLDOC incorrectly handled certain inputs, which could lead to an integer overflow. An attacker could potentially use this issue to cause a denial of service or execute arbitrary code. (CVE-2021-20308) It was discovered that HTMLDOC incorrectly handled memory in pspdf_export, which could lead to a double-free. An attacker could potentially use this issue to cause a denial of service or execute arbitrary code. (CVE-2021-23158) It was discovered that HTMLDOC incorrectly handled memory when loading a JPEG image, which could lead to a NULL pointer dereference. An attacker could potentially use this issue to cause a denial of service. (CVE-2021-23191, CVE-2021-26948) It was discovered that HTMLDOC incorrectly handled certain inputs, which could lead to a stack buffer overflow. An attacker could potentially use this issue to cause a denial of service or execute arbitrary code. (CVE-2021-23206, CVE-2021-40985, CVE-2021-43579) It was discovered that HTMLDOC incorrectly handled memory in pdpdf_prepare_page and render_table_row, which could lead to a heap buffer overflow. An attacker could potentially use this issue to cause a denial of service or execute arbitrary code. (CVE-2021-26252, CVE-2021-26259) It was discovered that HTMLDOC incorrectly handled memory in parse_paragraph, which could lead to a heap buffer overflow. An attacker could potentially use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-34119) It was discovered that HTMLDOC incorrectly handled memory in parse_tree. An attacker could potentially use this issue to leak sensitive information. (CVE-2021-34121)

References: https://ubuntu.com/security/notices/USN-7189-1, https://ubuntu.com/security/CVE-2021-20308, https://ubuntu.com/security/CVE-2021-23158, https://ubuntu.com/security/CVE-2021-23191, https://ubuntu.com/security/CVE-2021-23206, https://ubuntu.com/security/CVE-2021-26252, https://ubuntu.com/security/CVE-2021-26259, https://ubuntu.com/security/CVE-2021-26948, https://ubuntu.com/security/CVE-2021-34119, https://ubuntu.com/security/CVE-2021-34121, https://ubuntu.com/security/CVE-2021-40985, https://ubuntu.com/security/CVE-2021-43579