SUSE-SU-2021:3584-1: transfig&distro=SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2021:3584-1 is a vulnerability in transfig&distro=SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 12 · Downstream 0 · Related 12Timeline
- 29-10-2021PublishedVulnerability first disclosed.
- 02-05-2025Last modifiedVulnerability information updated.
Description
Security update for transfig This update for transfig fixes the following issues: Update to fig2dev version 3.2.8 Patchlevel 8b (Aug 2021) - bsc#1190618, CVE-2020-21529: stack buffer overflow in the bezier_spline function in genepic.c. - bsc#1190615, CVE-2020-21530: segmentation fault in the read_objects function in read.c. - bsc#1190617, CVE-2020-21531: global buffer overflow in the conv_pattern_index function in gencgm.c. - bsc#1190616, CVE-2020-21532: global buffer overflow in the setfigfont function in genepic.c. - bsc#1190612, CVE-2020-21533: stack buffer overflow in the read_textobject function in read.c. - bsc#1190611, CVE-2020-21534: global buffer overflow in the get_line function in read.c. - bsc#1190607, CVE-2020-21535: segmentation fault in the gencgm_start function in gencgm.c. - bsc#1192019, CVE-2021-32280: NULL pointer dereference in compute_closed_spline() in trans_spline.c
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse2 products
- transfig&distro=SUSE Linux Enterprise Workstation Extension 15 SP2< 3.2.8b-4.15.1
- transfig&distro=SUSE Linux Enterprise Workstation Extension 15 SP3< 3.2.8b-4.15.1
1 vendor · 2 products