CVE-2021-20307
First published: Mon Apr 05 2021(Updated: )
Format string vulnerability in panoFileOutputNamesCreate() in libpano13 2.9.20~rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Libpano13 Project Libpano13 | <=2.9.19 | |
| Libpano13 Project Libpano13 | =2.9.20-rc1 | |
| Libpano13 Project Libpano13 | =2.9.20-rc2 | |
| Fedoraproject Fedora | =32 | |
| Fedoraproject Fedora | =33 | |
| Fedoraproject Fedora | =34 | |
| Debian Debian Linux | =9.0 | |
| redhat/libpano13 | <2.9.20 | 2.9.20 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=1946284
- https://lists.debian.org/debian-lts-announce/2021/04/msg00010.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FVJRXUOBN56ZWP6QQ3NTA6DIFZMDZAEQ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JE6YZSXNVD6WZ3AG3ENL2DIHQFF24LYX/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VYDYBKHT2MNMQCUMAVJNZW4VH6MD5BOF/
- https://security.gentoo.org/glsa/202107-47
- https://sourceforge.net/projects/panotools/files/libpano13/libpano13-2.9.20/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JE6YZSXNVD6WZ3AG3ENL2DIHQFF24LYX/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VYDYBKHT2MNMQCUMAVJNZW4VH6MD5BOF/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FVJRXUOBN56ZWP6QQ3NTA6DIFZMDZAEQ/
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1946285
Frequently Asked Questions
What is CVE-2021-20307?
CVE-2021-20307 is a format string vulnerability in panoFileOutputNamesCreate() in libpano13 2.9.20~rc2+dfsg-3 and earlier versions.
How does CVE-2021-20307 affect Libpano13 and Fedora?
CVE-2021-20307 affects Libpano13 versions 2.9.20~rc2+dfsg-3 and earlier, as well as Fedora versions 32, 33, and 34.
What is the severity of CVE-2021-20307?
CVE-2021-20307 has a severity rating of 9.8 (Critical).
How can CVE-2021-20307 be fixed?
To fix CVE-2021-20307, it is recommended to update to the latest version of libpano13 or apply the relevant security patches provided by the vendor.
Where can I find more information about CVE-2021-20307?
More information about CVE-2021-20307 can be found in the following references: [Reference 1](https://bugzilla.redhat.com/show_bug.cgi?id=1946284), [Reference 2](https://lists.debian.org/debian-lts-announce/2021/04/msg00010.html), [Reference 3](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FVJRXUOBN56ZWP6QQ3NTA6DIFZMDZAEQ/).
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/references
- agent/severity
- agent/softwarecombine
- agent/description
- agent/event
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2021-20307
- agent/software-canonical-lookup
- agent/tags
- agent/trending
- vendor/libpano13 project
- canonical/libpano13 project libpano13
- version/libpano13 project libpano13/2.9.19
- version/libpano13 project libpano13/2.9.20-rc1
- version/libpano13 project libpano13/2.9.20-rc2
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/32
- version/fedoraproject fedora/33
- version/fedoraproject fedora/34
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/9.0
- package-manager/redhat