CVE-2019-1010189

EUVD-2019-1934
mgetty prior to version 1.2.1 is affected by: Infinite Loop. The impact is: DoS, the program does never terminates. The component is: g3/g32pbm.c. The attack vector is: Local, the user should open a specially crafted file. The fixed version is: 1.2.1.
Infinite Loop
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 37%
Affected Products (NVD)
VendorProductVersion
mgetty_projectmgetty
𝑥
< 1.2.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
mgetty
bookworm
1.2.1-1.2
fixed
bullseye
1.2.1-1.1
fixed
jessie
no-dsa
sid
1.2.1-1.3
fixed
stretch
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mgetty
bionic
needed
disco
Fixed 1.2.1-1
released
eoan
Fixed 1.2.1-1
released
focal
Fixed 1.2.1-1
released
groovy
Fixed 1.2.1-1
released
hirsute
Fixed 1.2.1-1
released
impish
Fixed 1.2.1-1
released
jammy
Fixed 1.2.1-1
released
kinetic
Fixed 1.2.1-1
released
lunar
Fixed 1.2.1-1
released
mantic
Fixed 1.2.1-1
released
noble
Fixed 1.2.1-1
released
trusty
dne
xenial
needed
Common Weakness Enumeration
References
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YH7KTF6IB4LZURQHCOICNVE6YDAIHV62/
https://www.x41-dsec.de/lab/advisories/x41-2018-007-mgetty/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YH7KTF6IB4LZURQHCOICNVE6YDAIHV62/
https://www.x41-dsec.de/lab/advisories/x41-2018-007-mgetty/