CVE-2019-13989

EUVD-2019-5248
dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat() function in main.c.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 43%
Affected Products (NVD)
VendorProductVersion
dpic_projectdpic
𝑥
≤ 2019-06-20
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
dpic
bookworm
2023.02.01-1
fixed
bullseye
2021.01.01-1
fixed
sid
2023.06.01-1
fixed
trixie
2023.06.01-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
dpic
bionic
needed
disco
ignored
eoan
ignored
focal
needed
groovy
ignored
hirsute
ignored
impish
ignored
jammy
needed
kinetic
ignored
lunar
ignored
mantic
ignored
noble
needed
trusty
dne
xenial
needed
Common Weakness Enumeration
References
https://gitlab.com/aplevich/dpic/issues/4
https://gitlab.com/aplevich/dpic/issues/4