VulnerabilityModified

CVE-2019-1010069

The impact is: Allows attackers to cause a denial of service attack via a crafted file.

MEDIUM 5.5EPSS 0.92%

Does this matter?

Lower severity and a low EPSS score (0.92%). Track it; it rarely justifies an emergency change on its own.

Description

moinejf abcm2ps 8.13.20 is affected by: Incorrect Access Control. The impact is: Allows attackers to cause a denial of service attack via a crafted file. The component is: front.c, function txt_add. The fixed version is: after commit commit 08aef597656d065e86075f3d53fda89765845eae.

CVSS 3.1: 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS: 0.92% probability · 58th percentile
CISA KEV: Not listed
Weakness: CWE-119
Affected: moinejf/abcm2ps · debian/debian linux
Source: josh@bress.net

References

https://drive.google.com/drive/u/2/folders/1Y2IbtEr9v4l4Ruie_AY9BFJOHOGiDt7SExploit, Third Party Advisory
https://github.com/leesavide/abcm2ps/issues/18Exploit, Issue Tracking, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/04/msg00015.htmlMailing List, Third Party Advisory
https://drive.google.com/drive/u/2/folders/1Y2IbtEr9v4l4Ruie_AY9BFJOHOGiDt7SExploit, Third Party Advisory
https://github.com/leesavide/abcm2ps/issues/18Exploit, Issue Tracking, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/04/msg00015.htmlMailing List, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.