CVE-2021-23165
A flaw was found in htmldoc before v1.9.12. Heap buffer overflow in ps ...
Severity by source
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Ubuntu (medium).
Description
A flaw was found in htmldoc before v1.9.12. Heap buffer overflow in pspdf_prepare_outpages(), in ps-pdf.cxx may lead to execute arbitrary code and denial of service.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| debian 10 | htmldoc | 1.9.3-1+deb10u2 |
| debian 11 | htmldoc | 1.9.11-4 |
| debian 12 | htmldoc | 1.9.11-4 |
| debian 13 | htmldoc | 1.9.11-4 |
| debian 14 | htmldoc | 1.9.11-4 |
| debian 9 | htmldoc | 1.8.27-8+deb9u1 |
| echo | htmldoc | 1.9.11-4 |
| ubuntu 14.04-ESM | htmldoc | 1.8.27-8ubuntu1+esm2 |
| ubuntu 16.04-ESM | htmldoc | 1.8.27-8ubuntu1.1+esm1 |
| ubuntu 18.04 | htmldoc | 1.9.2-1ubuntu0.2 |
| ubuntu 18.04-ESM | htmldoc | 1.9.2-1ubuntu0.2 |
| ubuntu 20.04 | htmldoc | 1.9.7-1ubuntu0.3 |
Show all 13 entries from 13 sources
| Source | Package | Fixed in |
|---|---|---|
| debian 10 | htmldoc | 1.9.3-1+deb10u2 |
| debian 11 | htmldoc | 1.9.11-4 |
| debian 12 | htmldoc | 1.9.11-4 |
| debian 13 | htmldoc | 1.9.11-4 |
| debian 14 | htmldoc | 1.9.11-4 |
| debian 9 | htmldoc | 1.8.27-8+deb9u1 |
| echo | htmldoc | 1.9.11-4 |
| ubuntu 14.04-ESM | htmldoc | 1.8.27-8ubuntu1+esm2 |
| ubuntu 16.04-ESM | htmldoc | 1.8.27-8ubuntu1.1+esm1 |
| ubuntu 18.04 | htmldoc | 1.9.2-1ubuntu0.2 |
| ubuntu 18.04-ESM | htmldoc | 1.9.2-1ubuntu0.2 |
| ubuntu 20.04 | htmldoc | 1.9.7-1ubuntu0.3 |
| ubuntu 20.04-ESM | htmldoc | 1.9.7-1ubuntu0.3 |
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1967014
- https://github.com/michaelrsweet/htmldoc/commit/369b2ea1fd0d0537ba707f20a2f047b6afd2fbdc
- https://github.com/michaelrsweet/htmldoc/commit/6e8a95561988500b5b5ae4861b3b0cbf4fba517f
- https://github.com/michaelrsweet/htmldoc/commit/6e8a95561988500b5b5ae4861b3b0cbf4fba517f.patch
- https://github.com/michaelrsweet/htmldoc/issues/413
- https://ubuntu.com/security/notices/USN-5438-1
- https://ubuntu.com/security/notices/USN-5438-2
- https://www.cve.org/CVERecord?id=CVE-2021-23165