Bugzilla – Bug 1190176
VUL-1: CVE-2020-19609: mupdf: heap-based buffer overflow in tiff_expand_colormap() when parsing TIFF files
Last modified: 2024-05-13 18:08:04 UTC
rh#1985351 Artifex MuPDF before 1.18.0 has a heap based buffer over-write in tiff_expand_colormap() function when parsing TIFF files allowing attackers to cause a denial of service. References: https://bugs.ghostscript.com/show_bug.cgi?id=703076 https://bugs.ghostscript.com/show_bug.cgi?id=701176 http://git.ghostscript.com/?p=mupdf.git;h=b7892cdc7fae62aa57d63ae62144e1f11b5f9275 References: https://bugzilla.redhat.com/show_bug.cgi?id=1985351 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-19609 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19609 https://bugs.ghostscript.com/show_bug.cgi?id=703076 https://bugs.ghostscript.com/show_bug.cgi?id=701176 http://git.ghostscript.com/?p=mupdf.git;h=b7892cdc7fae62aa57d63ae62144e1f11b5f9275
This is an autogenerated message for OBS integration: This bug (1190176) was mentioned in https://build.opensuse.org/request/show/920347 15.2+Backports:SLE-15-SP1+Backports:SLE-15-SP2+Backports:SLE-15-SP3 / mupdf
openSUSE-SU-2021:1341-1: An update that fixes two vulnerabilities is now available. Category: security (important) Bug References: 1190175,1190176 CVE References: CVE-2020-16600,CVE-2020-19609 JIRA References: Sources used: openSUSE Leap 15.2 (src): mupdf-1.12.0-lp152.6.3.1 openSUSE Backports SLE-15-SP3 (src): mupdf-1.12.0-bp153.2.3.1 openSUSE Backports SLE-15-SP2 (src): mupdf-1.12.0-bp152.4.3.1 openSUSE Backports SLE-15-SP1 (src): mupdf-1.12.0-bp151.4.3.1