- Vulnerability/
- USN-4198-1
USN-4198-1: DjVuLibre vulnerabilities
First published: Thu Nov 21 2019(Updated: )
It was discovered that DjVuLibre incorrectly handled certain memory operations. If a user or automated system were tricked into processing a specially crafted DjVu file, a remote attacker could cause applications to hang or crash, resulting in a denial of service, or possibly execute arbitrary code.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/libdjvulibre21 | <3.5.27.1-13ubuntu0.1 | 3.5.27.1-13ubuntu0.1 |
| =19.10 | ||
| All of | ||
| ubuntu/libdjvulibre21 | <3.5.27.1-10ubuntu0.1 | 3.5.27.1-10ubuntu0.1 |
| =19.04 | ||
| All of | ||
| ubuntu/libdjvulibre21 | <3.5.27.1-8ubuntu0.1 | 3.5.27.1-8ubuntu0.1 |
| =18.04 | ||
| All of | ||
| ubuntu/libdjvulibre21 | <3.5.27.1-5ubuntu0.1 | 3.5.27.1-5ubuntu0.1 |
| =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2019-15142
- https://ubuntu.com/security/CVE-2019-15143
- https://ubuntu.com/security/CVE-2019-15144
- https://ubuntu.com/security/CVE-2019-15145
- https://ubuntu.com/security/CVE-2019-18804
- https://launchpad.net/ubuntu/+source/djvulibre/3.5.27.1-13ubuntu0.1
- https://launchpad.net/ubuntu/+source/djvulibre/3.5.27.1-10ubuntu0.1
- https://launchpad.net/ubuntu/+source/djvulibre/3.5.27.1-8ubuntu0.1
- https://launchpad.net/ubuntu/+source/djvulibre/3.5.27.1-5ubuntu0.1
- https://ubuntu.com/security/notices/USN-4198-1 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the vulnerability ID for DjVuLibre vulnerabilities?
The vulnerability ID for DjVuLibre vulnerabilities is USN-4198-1.
What is the severity of USN-4198-1?
The severity of USN-4198-1 is not mentioned in the description.
How can a remote attacker exploit USN-4198-1?
A remote attacker can exploit USN-4198-1 by tricking a user or automated system into processing a specially crafted DjVu file, leading to a denial of service or possible execution of arbitrary code.
Which versions of libdjvulibre21 are affected by USN-4198-1?
The affected versions of libdjvulibre21 are 3.5.27.1-13ubuntu0.1, 3.5.27.1-10ubuntu0.1, 3.5.27.1-8ubuntu0.1, and 3.5.27.1-5ubuntu0.1.
How can the vulnerability in DjVuLibre be fixed?
The vulnerability in DjVuLibre can be fixed by applying the relevant security updates, such as libdjvulibre21 version 3.5.27.1-13ubuntu0.1.
- agent/references
- agent/severity
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/event
- agent/tags
- agent/description
- agent/title
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/trending
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/19.10
- version/ubuntu ubuntu/19.04
- version/ubuntu ubuntu/18.04
- version/ubuntu ubuntu/16.04