Lucene search
Veracode Vulnerability DatabaseVERACODE:32947HistoryNov 13, 2021 - 12:40 a.m.
Integer Overflow
2021-11-1300:40:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
autotrace
integer overflow
input-bmp.c
malloc
bitmap image
system hang
vulnerability
EPSS
0.001
Percentile
38.6%
autotrace is vulnerable integer overflows. A biWidth*biBitCnt integer overflow in input-bmp.c allows attackers to provide an unexpected input value to malloc via a malformed bitmap image resulting in a system hang.
References
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/
access.redhat.com/errata/RHSA-2021:4519
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=1945033
github.com/autotrace/autotrace/commits/master
github.com/autotrace/autotrace/commits/master/src/input-bmp.c
github.com/autotrace/autotrace/pull/40
lists.fedoraproject.org/archives/list/[email protected]/message/NC6MUH2RLVEA634LHBNZ2KO7MQKI2RDZ/
Related
osv
osv
CVE-2019-19004
2021-02-11 21:15:12
Moderate: autotrace security update
2021-11-09 09:40:34
ubuntucve
ubuntucve
CVE-2019-19004
2021-02-11 00:00:00
redhatcve
redhatcve
CVE-2019-19004
2021-03-31 10:03:12
prion
prion
Integer overflow
2021-02-11 21:15:00
cve
cve
CVE-2019-19004
2021-02-11 21:15:12
nvd
nvd
CVE-2019-19004
2021-02-11 21:15:12
cvelist
cvelist
CVE-2019-19004
2021-02-11 20:08:15
nessus
nessus
CentOS 8 : autotrace (CESA-2021:4519)
2021-11-11 00:00:00
RHEL 8 : autotrace (RHSA-2021:4519)
2021-11-11 00:00:00
Amazon Linux 2023 : autotrace, autotrace-devel (ALAS2023-2023-004)
2023-03-21 00:00:00
openvas
openvas
Fedora: Security Advisory for autotrace (FEDORA-2021-cb871c9e6c)
2021-05-13 00:00:00
redhat
redhat
(RHSA-2021:4519) Moderate: autotrace security update
2021-11-09 09:40:34
fedora
fedora
[SECURITY] Fedora 34 Update: autotrace-0.31.1-60.fc34
2021-05-10 01:06:44
almalinux
almalinux
Moderate: autotrace security update
2021-11-09 09:40:34
rocky
rocky
autotrace security update
2021-11-09 00:00:00
suse
suse
Security update for autotrace (moderate)
2022-05-18 00:00:00
amazon
amazon
Medium: autotrace
2023-01-31 19:19:00