Bug 1992805 (CVE-2020-21675) - CVE-2020-21675 transfig: A stack-based buffer overflow in the genptk_text component in genptk.c could result in a denial of service
Summary: CVE-2020-21675 transfig: A stack-based buffer overflow in the genptk_text com...
Keywords:
Status: NEW
Alias: CVE-2020-21675
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2000748 2000749
Blocks: 1992794
TreeView+ depends on / blocked
 
Reported: 2021-08-11 18:40 UTC by Michael Kaplan
Modified: 2021-10-31 23:29 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:


Attachments (Terms of Use)

Description Michael Kaplan 2021-08-11 18:40:21 UTC
A stack-based buffer overflow in the genptk_text component in genptk.c of fig2dev 3.2.7b allows attackers to cause a denial of service (DOS) via converting a xfig file into ptk format.

References:

https://sourceforge.net/p/mcj/tickets/78/

Comment 1 Ondrej Dubaj 2021-08-16 06:12:26 UTC
Hi,

can you please create a tracking issues for a specific versions of RHEL/Fedora, which are affected by the newly created CVEs? I see multiple CVE trackers created recently and for the process of backporting the fixes to continue correctly, we need tracker for every affected version for every CVE. Can you please handle this ? From the first sight, I assume rhel-9 and Fedora should be affected.

Thanks.

Comment 2 Michael Kaplan 2021-08-18 15:42:26 UTC
In reply to comment #1:
> Hi,
> 
> can you please create a tracking issues for a specific versions of
> RHEL/Fedora, which are affected by the newly created CVEs? I see multiple
> CVE trackers created recently and for the process of backporting the fixes
> to continue correctly, we need tracker for every affected version for every
> CVE. Can you please handle this ? From the first sight, I assume rhel-9 and
> Fedora should be affected.
> 
> Thanks.

Hey, 
Based on our Manifest and version Fedora doesn't seem affected. This is shipped in Fedora(fedora:34/transfig-3.2.8a-2.fc34)

rhel-9 is probably affected, Other rhel versions need to be checked over by analysts first

I can create rhel-9 trackers, wondering if it's fine for you to have all the cves linked into one tracker bug or do prefer separate trackers?

Comment 3 Ondrej Dubaj 2021-08-19 05:49:17 UTC
Hi,

One tracker should be enough, thank you.


Note You need to log in before you can comment on or make changes to this bug.