A stack-based buffer overflow in the genpstrx_text() component in genpstricks.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into pstricks format.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5864-1 advisory.

    Frederic Cambus discovered that Fig2dev incorrectly handled certain image files. If a user or an automated     system were tricked into opening a certain

    specially crafted input file, a remote attacker could possibly use this issue to cause a denial of     service. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-14275)

    It was discovered that Fig2dev incorrectly handled certain image files. If

    a user or an automated system were tricked into opening a certain specially crafted input file, a remote     attacker could possibly use this issue to cause a denial of service. (CVE-2019-19555, CVE-2019-19797,     CVE-2020-21529,

    CVE-2020-21530, CVE-2020-21531, CVE-2020-21532, CVE-2020-21533,

    CVE-2020-21534, CVE-2020-21535, CVE-2020-21675, CVE-2020-21676,

    CVE-2021-3561)

    It was discovered that Fig2dev incorrectly handled certain image files. If

    a user or an automated system were tricked into opening a certain specially crafted input file, a remote     attacker could possibly use this issue to cause a denial of service. (CVE-2021-32280)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3304 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3304-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/        Adrian Bunk <bunk@debian.org>     January 31, 2023                              https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : fig2dev     Version        : 1:3.2.7a-5+deb10u5     CVE ID         : CVE-2020-21529 CVE-2020-21531 CVE-2020-21532 CVE-2020-21676                      CVE-2021-32280     Debian Bug     : 960736

    Brief introduction

    CVE-2020-21529

        Stack buffer overflow in bezier_spline().

    CVE-2020-21531

        Global buffer overflow in conv_pattern_index().

    CVE-2020-21532

        Global buffer overflow in setfigfont().

    CVE-2020-21676

        Stack-based buffer overflow in genpstrx_text().

    CVE-2021-32280

        NULL pointer dereference in compute_closed_spline().

    For Debian 10 buster, these problems have been fixed in version     1:3.2.7a-5+deb10u5.

    We recommend that you upgrade your fig2dev packages.

    For the detailed security status of fig2dev please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/fig2dev

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2778 advisory.

    Multiple security vulnerabilities have been discovered in fig2dev, utilities for converting XFig figure     files. Buffer overflows, out-of-bounds reads and NULL pointer dereferences could lead to a denial-of-     service or other unspecified impact. For Debian 9 stretch, these problems have been fixed in version     1:3.2.6a-2+deb9u4. We recommend that you upgrade your fig2dev packages. For the detailed security status     of fig2dev please refer to its security tracker page at: https://security-     tracker.debian.org/tracker/fig2dev Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
171392	Ubuntu 18.04 LTS / 20.04 LTS : Fig2dev vulnerabilities (USN-5864-1)	Nessus	Ubuntu Local Security Checks	high
170915	Debian dla-3304 : fig2dev - security update	Nessus	Debian Local Security Checks	medium
153965	Debian DLA-2778-1 : fig2dev - LTS security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2020-21676

medium

Tenable Plugins

high

medium

high