USN-7189-1: HTMLDOC vulnerabilities
It was discovered that HTMLDOC incorrectly handled certain inputs, which could lead to an integer overflow. An attacker could potentially use this issue to cause a denial of service or execute arbitrary code. (CVE-2021-20308) It was discovered that HTMLDOC incorrectly handled memory in pspdfexport, which could lead to a double-free. An attacker could potentially use this issue to cause a denial of service or execute arbitrary code. (CVE-2021-23158) It was discovered that HTMLDOC incorrectly handled memory when loading a JPEG image, which could lead to a NULL pointer dereference. An attacker could potentially use this issue to cause a denial of service. (CVE-2021-23191, CVE-2021-26948) It was discovered that HTMLDOC incorrectly handled certain inputs, which could lead to a stack buffer overflow. An attacker could potentially use this issue to cause a denial of service or execute arbitrary code. (CVE-2021-23206, CVE-2021-40985, CVE-2021-43579) It was discovered that HTMLDOC incorrectly handled memory in pdpdfpreparepage and rendertablerow, which could lead to a heap buffer overflow. An attacker could potentially use this issue to cause a denial of service or execute arbitrary code. (CVE-2021-26252, CVE-2021-26259) It was discovered that HTMLDOC incorrectly handled memory in parseparagraph, which could lead to a heap buffer overflow. An attacker could potentially use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-34119) It was discovered that HTMLDOC incorrectly handled memory in parsetree. An attacker could potentially use this issue to leak sensitive information. (CVE-2021-34121)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-7189-1?
The vulnerability USN-7189-1 has a high severity due to the potential for denial of service and arbitrary code execution.
How do I fix USN-7189-1?
To fix USN-7189-1, upgrade to the patched versions of htmldoc as specified in the advisory.
What versions of Ubuntu are affected by USN-7189-1?
USN-7189-1 affects Ubuntu 20.04, 18.04, 16.04, and 14.04 with specified versions of htmldoc.
What type of vulnerability is USN-7189-1?
USN-7189-1 is an integer overflow vulnerability found in htmldoc.
Can USN-7189-1 lead to any exploits?
Yes, USN-7189-1 could potentially allow an attacker to execute arbitrary code or cause a denial of service.