In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade texlive-bin | Jun 2, 2023 | Oct 29, 2019 |
| Suse | — | Upgrade texlive-pax-binUpgrade texlive-dvipng-binUpgrade texlive-hyperxmp-binUpgrade texlive-texfot-binUpgrade texliveUpgrade texlive-web-binUpgrade texlive-makeindex-binUpgrade texlive-thumbpdf-binUpgrade texlive-csplain-binUpgrade texlive-findhyph-binUpgrade texlive-ltxfileinfo-binUpgrade texlive-luahbtex-binUpgrade texlive-omegaware-binUpgrade texlive-platex-binUpgrade texlive-musixtnt-binUpgrade texlive-pythontex-binUpgrade texlive-authorindex-binUpgrade texlive-a2ping-binUpgrade texlive-dtl-binUpgrade texlive-synctex-binUpgrade texlive-lacheck-binUpgrade texlive-texware-binUpgrade texlive-exceltex-binUpgrade texlive-dviinfox-binUpgrade texlive-bin-develUpgrade texlive-purifyeps-binUpgrade texlive-ctan-o-mat-binUpgrade texlive-arara-binUpgrade texlive-glossaries-binUpgrade texlive-lcdftypetools-binUpgrade texlive-texsis-binUpgrade texlive-axodraw2-binUpgrade texlive-texlua-develUpgrade texlive-pdfcrop-binUpgrade texlive-epstopdf-binUpgrade texlive-webquiz-binUpgrade texlive-scripts-binUpgrade texlive-velthuis-binUpgrade texlive-fragmaster-binUpgrade texlive-rubik-binUpgrade texlive-patgen-binUpgrade texlive-petri-nets-binUpgrade texlive-texosquery-binUpgrade texlive-mltex-binUpgrade texlive-seetexk-binUpgrade texlive-make4ht-binUpgrade texlive-cyrillic-bin-binUpgrade texlive-de-macro-binUpgrade texlive-mflua-binUpgrade texlive-lwarp-binUpgrade texlive-autosp-binUpgrade texlive-urlbst-binUpgrade texlive-ptex2pdf-binUpgrade texlive-pdftex-binUpgrade texlive-context-binUpgrade texlive-cweb-binUpgrade texlive-ltximg-binUpgrade texlive-cjk-gs-integrate-binUpgrade texlive-listbib-binUpgrade texlive-typeoutfileinfo-binUpgrade texlive-pdftex-quiet-binUpgrade texlive-clojure-pamphlet-binUpgrade texlive-pkfix-helper-binUpgrade texlive-texluajit-develUpgrade texlive-makedtx-binUpgrade texlive-pdfxup-binUpgrade texlive-texcount-binUpgrade texlive-m-tx-binUpgrade texlive-splitindex-binUpgrade texlive-crossrefware-binUpgrade texlive-latex-papersize-binUpgrade libtexluajit2Upgrade texlive-cluttex-binUpgrade texlive-luaotfload-binUpgrade texlive-xindex-binUpgrade texlive-l3build-binUpgrade texlive-dosepsbin-binUpgrade texlive-dvipos-binUpgrade texlive-tex4ht-binUpgrade texlive-pmx-binUpgrade texlive-mptopdf-binUpgrade texlive-xetex-binUpgrade texlive-mf2pt1-binUpgrade texlive-mex-binUpgrade texlive-perltex-binUpgrade texlive-jadetex-binUpgrade texlive-bibtex-binUpgrade texlive-mkpic-binUpgrade texlive-pedigree-perl-binUpgrade texlive-ctanupload-binUpgrade texlive-lollipop-binUpgrade texlive-ptexenc-develUpgrade texlive-attachfile2-binUpgrade texlive-chktex-binUpgrade texlive-kotex-utils-binUpgrade texlive-pdfbook2-binUpgrade texlive-latexindent-binUpgrade texlive-getmap-binUpgrade texlive-vlna-binUpgrade texlive-wordcount-binUpgrade texlive-mkgrkindex-binUpgrade texlive-accfonts-binUpgrade texlive-chklref-binUpgrade texlive-match_parens-binUpgrade texlive-tikztosvg-binUpgrade texlive-bibexport-binUpgrade texlive-pkfix-binUpgrade texlive-tex-binUpgrade texlive-eplain-binUpgrade texlive-convbkmk-binUpgrade texlive-ttfutils-binUpgrade texlive-latexpand-binUpgrade libptexenc1Upgrade libkpathsea6Upgrade libsynctex2Upgrade texlive-dtxgen-binUpgrade texlive-bibtex8-binUpgrade texlive-amstex-binUpgrade texlive-checklistings-binUpgrade texlive-ulqda-binUpgrade texlive-cachepic-binUpgrade texlive-uplatex-binUpgrade texlive-checkcites-binUpgrade texlive-git-latexdiff-binUpgrade texlive-ctanify-binUpgrade texlive-xdvi-binUpgrade texlive-bibtexu-binUpgrade texlive-light-latex-make-binUpgrade perl-biberUpgrade texlive-texplate-binUpgrade texlive-ketcindy-binUpgrade texlive-latex2man-binUpgrade texlive-metafont-binUpgrade texlive-detex-binUpgrade texlive-lilyglyphs-binUpgrade texlive-latex2nemeth-binUpgrade texlive-mfware-binUpgrade texlive-optex-binUpgrade texlive-bundledoc-binUpgrade texlive-mathspic-binUpgrade texlive-latexdiff-binUpgrade texlive-texdoctk-binUpgrade texlive-multibibliography-binUpgrade texlive-pst2pdf-binUpgrade texlive-pfarrei-binUpgrade texlive-xml2pmx-binUpgrade texlive-dvipdfmx-binUpgrade texlive-dviasm-binUpgrade texlive-xpdfopen-binUpgrade texlive-luajittex-binUpgrade texlive-afm2pl-binUpgrade texlive-pdftosrc-binUpgrade texlive-diadia-binUpgrade texlive-xmltex-binUpgrade texlive-latexfileversion-binUpgrade texlive-fontinst-binUpgrade texlive-cslatex-binUpgrade texlive-pst-pdf-binUpgrade texlive-pdfjam-binUpgrade texlive-texliveonfly-binUpgrade texlive-srcredact-binUpgrade texlive-albatross-binUpgrade texlive-asymptote-binUpgrade texlive-bib2gls-binUpgrade texlive-luatex-binUpgrade texlive-latex-bin-dev-binUpgrade texlive-kpathsea-develUpgrade libtexlua53-5Upgrade texlive-mkjobtexmf-binUpgrade texlive-texdiff-binUpgrade texlive-cjkutils-binUpgrade texlive-dviljk-binUpgrade texlive-latex-git-log-binUpgrade texlive-tex4ebook-binUpgrade texlive-gregoriotex-binUpgrade texlive-metapost-binUpgrade texlive-ps2pk-binUpgrade texlive-dviout-util-binUpgrade texlive-ptex-binUpgrade texlive-tpic2pdftex-binUpgrade texlive-aleph-binUpgrade texlive-ctanbib-binUpgrade texlive-sty2dtx-binUpgrade texlive-biber-binUpgrade texlive-dvicopy-binUpgrade texlive-pygmentex-binUpgrade texlive-synctex-develUpgrade texlive-ptex-fontmaps-binUpgrade texlive-ps2eps-binUpgrade texlive-pdflatexpicscale-binUpgrade texlive-listings-ext-binUpgrade texlive-dvidvi-binUpgrade texlive-epspdf-binUpgrade texlive-dvips-binUpgrade texlive-texdoc-binUpgrade texlive-tie-binUpgrade texlive-vpe-binUpgrade texlive-texdirflatten-binUpgrade texlive-pmxchords-binUpgrade texlive-yplan-binUpgrade texlive-fig4latex-binUpgrade texlive-texdef-binUpgrade texlive-scripts-extra-binUpgrade texlive-latex-bin-binUpgrade texlive-ctie-binUpgrade texlive-texloganalyser-binUpgrade texlive-fontools-binUpgrade texlive-dvisvgm-binUpgrade texlive-musixtex-binUpgrade texlive-spix-binUpgrade texlive-latexmk-binUpgrade texlive-fontware-binUpgrade texlive-jfmutil-binUpgrade texlive-kpathsea-binUpgrade texlive-svn-multi-binUpgrade texlive-xelatex-dev-binUpgrade texlive-uptex-binUpgrade texlive-adhocfilelist-binUpgrade texlive-gsftopk-bin | Aug 9, 2024 | Oct 29, 2019 |
| Ubuntu | — | Upgrade texlive-binaries | Mar 15, 2024 | Oct 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub