{"id":"CVE-2019-18604","aliases":["DEBIAN-CVE-2019-18604","DLA-3427-2","EUVD-2019-8338","GHSA-hfg3-f7fm-c9xc","UBUNTU-CVE-2019-18604","USN-6695-1","openSUSE-SU-2024:11431-1"],"status":"published","title":"In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other...","description":"In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01875,"percentile":0.7955,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2019-10-29T00:00:00Z","modified":"2026-10-20T13:40:40Z","fixes":[{"ecosystem":"Debian:12","package":"texlive-bin","fixed_in":["2020.20200327.54578-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"texlive-bin","fixed_in":["2020.20200327.54578-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"texlive-bin","fixed_in":["2020.20200327.54578-2"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"texlive-bin","fixed_in":["2018.20181218.49446-1+deb10u2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"texlive-bin","fixed_in":["2019.20190605.51237-3ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"texlive-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2020.20200327.54578-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"texlive-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2020.20200327.54578-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"texlive-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2020.20200327.54578-2"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"texlive-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2018.20181218.49446-1+deb10u2"}]}],"versions":["2018.20181218.49446-1","2018.20181218.49446-1+deb10u1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"texlive-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2019.20190605.51237-3ubuntu0.2"}]}],"versions":["2019.20190605.51237-2build1","2019.20190605.51237-3","2019.20190605.51237-3build1","2019.20190605.51237-3build2","2019.20190605.51237-3ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"texlive-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2019.20190605.51237-3ubuntu0.2"}]}],"versions":["2019.20190605.51237-2build1","2019.20190605.51237-3","2019.20190605.51237-3build1","2019.20190605.51237-3build2","2019.20190605.51237-3ubuntu0.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"texlive-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.20210626.59705-1ubuntu0.2"}]}],"versions":["2020.20200327.54578-7","2020.20200327.54578-7build1","2021.20210626.59705-1","2021.20210626.59705-1build1","2021.20210626.59705-1ubuntu0.1"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"texlive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.20210325.svn34398-76.3"}]}],"bundled":4}],"products":[{"vendor":"axodraw2_project","product":"axodraw2"},{"vendor":"axohelp.c_project","product":"axohelp.c"}],"references":[{"url":"https://github.com/TeX-Live/texlive-source/commit/9216833a3888a4105a18e8c349f65b045ddb1079#diff-987e40c0e27ee43f6a2414ada73a191a","tags":["x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00033.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-18604"},{"url":"https://github.com/advisories/GHSA-hfg3-f7fm-c9xc"},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-18604","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-18604","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6695-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-18604","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-32668","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-25262","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8016","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-18604","description":"In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled.","status":"published","published":"2019-10-29T00:00:00Z","modified":"2024-08-05T01:54:14.54Z","updated_at":"2026-11-02T14:32:23.803059Z"}],"euvd":[{"id":"EUVD-2019-8338","description":"In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled.","status":"published","published":"2019-10-29T00:00:00Z","modified":"2024-08-05T01:54:14Z","updated_at":"2026-11-03T02:40:27.733219Z"}],"ghsa":[{"id":"GHSA-hfg3-f7fm-c9xc","title":"In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other...","description":"In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled.","status":"published","published":"2022-05-24T17:00:04Z","modified":"2023-06-01T00:30:27Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:54:37.773458Z"}],"nvd":[{"id":"CVE-2019-18604","description":"In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled.","status":"published","published":"2019-10-29T19:15:19.703Z","modified":"2026-06-17T02:25:09.02Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:05:32.982925Z"}],"osv":[{"id":"CVE-2019-18604","description":"In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled.","status":"published","published":"2019-10-29T19:15:19.703Z","modified":"2026-10-20T13:40:40.515961543Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:11.673963Z"},{"id":"DEBIAN-CVE-2019-18604","description":"In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled.","status":"published","published":"2019-10-29T19:15:19.703Z","modified":"2026-09-21T07:01:16.902024977Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:31.867036Z"},{"id":"UBUNTU-CVE-2019-18604","description":"In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled.","status":"published","published":"2019-10-29T19:15:00Z","modified":"2026-04-22T12:14:39.173714Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:20.325378Z"},{"id":"DLA-3427-2","title":"texlive-bin - regression update","status":"published","published":"2023-05-31T00:00:00Z","modified":"2026-03-09T01:19:20.095466Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"openSUSE-SU-2024:11431-1","title":"libkpathsea6-6.3.3-76.3 on GA media","description":"These are all security issues fixed in the libkpathsea6-6.3.3-76.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:09:14.082976Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"USN-6695-1","title":"texlive-bin vulnerabilities","description":"It was discovered that TeX Live incorrectly handled certain memory\noperations in the embedded axodraw2 tool. An attacker could possibly use\nthis issue to cause TeX Live to crash, resulting in a denial of service.\nThis issue only affected Ubuntu 20.04 LTS. (CVE-2019-18604)\n\nIt was discovered that TeX Live allowed documents to make arbitrary\nnetwork requests. If a user or automated system were tricked into opening a\nspecially crafted document, a remote attacker could possibly use this issue\nto exfiltrate sensitive information, or perform other network-related\nattacks. This issue only affected Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.\n(CVE-2023-32668)\n\nIt was discovered that TeX Live incorrectly handled certain TrueType fonts.\nIf a user or automated system were tricked into opening a specially crafted\nTrueType font, a remote attacker could use this issue to cause TeX Live to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. (CVE-2024-25262)\n","status":"published","published":"2024-03-14T11:45:28Z","modified":"2026-04-22T10:45:10.147302Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}