CVE-2021-37530: Medium severity Fig2dev Project Fig2dev vulnerability
A denial of service vulnerabiity exists in fig2dev through 3.28a due to a segfault in the openstream function in readpics.c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/fig2devto a version that resolves this vulnerability.Fixed in 3.2.8b-r0
Event History
Frequently Asked Questions
What is CVE-2021-37530?
CVE-2021-37530 is a denial of service vulnerability in fig2dev through 3.28a.
What is the severity of CVE-2021-37530?
The severity of CVE-2021-37530 is medium with a CVSS score of 5.5.
Which software versions are affected by CVE-2021-37530?
Fig2dev versions up to and including 3.28a, Debian Linux version 9.0, Debian Linux version 10.0, and Debian Linux version 11.0 are affected by CVE-2021-37530.
How does CVE-2021-37530 cause a denial of service?
CVE-2021-37530 causes a denial of service through a segfault in the open_stream function in readpics.c.
Is there a fix available for CVE-2021-37530?
At the moment, there is no known fix available for CVE-2021-37530. It is recommended to follow the recommendations provided in the reference link.