Oval Definition:oval:com.ubuntu.bionic:def:2019151450000000
Revision Date:2019-08-18Version:1
Title:CVE-2019-15145 on Ubuntu 18.04 LTS (bionic) - low.
Description:DjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack (application crash via an out-of-bounds read) by crafting a corrupted JB2 image file that is mishandled in JB2Dict::JB2Codec::get_direct_context in libdjvu/JB2Image.h because of a missing zero-bytes check in libdjvu/GBitmap.h.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2019-15145
Platform(s):Ubuntu 18.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 18.04 LTS (bionic) is installed.
  • AND djvulibre package in bionic was vulnerable but has been fixed (note: '3.5.27.1-8ubuntu0.1').
    • BACK