CVE-2019-15144: Medium severity Djvulibre Project Djvulibre vulnerability
In DjVuLibre 3.5.27, the sorting functionality (aka GArrayTemplate<TYPE>::sort) allows attackers to cause a denial-of-service (application crash due to an Uncontrolled Recursion) by crafting a PBM image file that is mishandled in libdjvu/GContainer.h.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-15144?
CVE-2019-15144 is a vulnerability in DjVuLibre 3.5.27 that allows attackers to cause a denial-of-service by crafting a malicious image file.
What is the severity of CVE-2019-15144?
The severity of CVE-2019-15144 is medium with a CVSS score of 5.5.
How can I fix CVE-2019-15144?
You can fix CVE-2019-15144 by updating to DjVuLibre version 3.5.27.1-11 or higher.
Where can I find more information about CVE-2019-15144?
You can find more information about CVE-2019-15144 in the references provided: [link1](http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00086.html), [link2](http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00087.html), [link3](https://lists.debian.org/debian-lts-announce/2019/08/msg00036.html).
What is CWE-674?
CWE-674 is a vulnerability type known as Uncontrolled Recursion.