Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 9: MGASA-2024-0353 Critical: htmldoc Buffer Overflow

mageia
Calendar Grey November 9, 2024
Dist Mageia Esm H88
The latest htmldoc updates tackle significant vulnerabilities in Mageia, impacting various versions and releases.
HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node

Summary

HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node. (CVE-2024-45508) HTMLDOC v1.9.18 contains a buffer overflow in parse_pre function,ps-pdf.cxx:5681. (CVE-2024-46478)

References

- https://bugs.mageia.org/show_bug.cgi?id=33737

-

- https://www.cve.org/CVERecord?id=CVE-2024-45508

- https://www.cve.org/CVERecord?id=CVE-2024-46478

Topics%20covered

Topics Covered

security advisory security issue buffer overflow software update htmldoc out-of-bounds write Mageia

Resolution

SRPMS

- 9/core/htmldoc-1.9.15-3.1.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 09 Nov 2024
URL: https://advisories.mageia.org/MGASA-2024-0353.html
Type: security
CVE: CVE-2024-45508, CVE-2024-46478

Topics%20covered

Topics Covered

security advisory security issue buffer overflow software update htmldoc out-of-bounds write Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here