The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - autotrace: bitmap double free in main.c allows attackers to cause an unspecified impact (CVE-2019-19005)

  - autotrace: heap-buffer overflow via the ReadImage() at input-bmp.c (CVE-2022-32323)

  - Heap-based buffer overflow in the pstoedit_suffix_table_init function in output-pstoedit.c in AutoTrace     0.31.1 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted bmp image     file. (CVE-2016-7392)

  - A biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to provide an     unexpected input value to malloc via a malformed bitmap image. (CVE-2019-19004)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:4519 advisory.

  - autotrace: integer overflow in input-bmp.c (CVE-2019-19004)

  - autotrace: bitmap double free in main.c allows attackers to cause an unspecified impact (CVE-2019-19005)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2021:4519 advisory.

  - A biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to provide an     unexpected input value to malloc via a malformed bitmap image. (CVE-2019-19004)

  - A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a     malformed bitmap image. This may occur after the use-after-free in CVE-2017-9182. (CVE-2019-19005)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-004 advisory.

  - A biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to provide an     unexpected input value to malloc via a malformed bitmap image. (CVE-2019-19004)

  - A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a     malformed bitmap image. This may occur after the use-after-free in CVE-2017-9182. (CVE-2019-19005)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1929 advisory.

  - Heap-based buffer overflow in the pstoedit_suffix_table_init function in output-pstoedit.c in AutoTrace     0.31.1 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted bmp image     file. (CVE-2016-7392)

  - A biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to provide an     unexpected input value to malloc via a malformed bitmap image. (CVE-2019-19004)

  - A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a     malformed bitmap image. This may occur after the use-after-free in CVE-2017-9182. (CVE-2019-19005)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-160 advisory.

  - A biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to provide an     unexpected input value to malloc via a malformed bitmap image. (CVE-2019-19004)

  - A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a     malformed bitmap image. This may occur after the use-after-free in CVE-2017-9182. (CVE-2019-19005)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:4519 advisory.

  - autotrace: integer overflow in input-bmp.c (CVE-2019-19004)

  - autotrace: bitmap double free in main.c allows attackers to cause an unspecified impact (CVE-2019-19005)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - autotrace: bitmap double free in main.c allows attackers to cause an unspecified impact (CVE-2019-19005)

  - autotrace: heap-buffer overflow via the ReadImage() at input-bmp.c (CVE-2022-32323)

  - A biWidth*biBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to provide an     unexpected input value to malloc via a malformed bitmap image. (CVE-2019-19004)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	Name	Product	Family	Published	Updated	Severity
195435	RHEL 6 : autotrace (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	high
155078	CentOS 8 : autotrace (CESA-2021:4519)	Nessus	CentOS Local Security Checks	11/11/2021	11/11/2021	high
157661	AlmaLinux 8 : autotrace (ALSA-2021:4519)	Nessus	Alma Linux Local Security Checks	2/9/2022	2/14/2022	high
173078	Amazon Linux 2023 : autotrace, autotrace-devel (ALAS2023-2023-004)	Nessus	Amazon Linux Local Security Checks	3/21/2023	3/21/2023	high
171047	Amazon Linux 2 : (ALAS-2023-1929)	Nessus	Amazon Linux Local Security Checks	2/6/2023	2/6/2023	high
166994	Amazon Linux 2022 : (ALAS2022-2022-160)	Nessus	Amazon Linux Local Security Checks	11/4/2022	11/4/2022	high
155107	RHEL 8 : autotrace (RHSA-2021:4519)	Nessus	Red Hat Local Security Checks	11/11/2021	4/28/2024	high
195412	RHEL 7 : autotrace (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high