Tug vulnerabilities

Products

• Tex Live 10
• Tetex 5
• Texlive 2007 4
• Texlive 3

Newest

• tug tex live Tex Live 944e257 has a NULL pointer dereference in texk/web2c/pdftexdir/writet1.c. NOTE: this is... CVE-2023-46048 Fix availableDisputed 6.2 MediumMarch 27, 2024
• tug tex live texlive-bin commit c515e was discovered to contain heap buffer overflow via the function... CVE-2024-25262 Fix available 8.1 HighFebruary 20, 2024
• luatex project luatex, miktex, tug tex live +2 more LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file... CVE-2023-32700 Fix available 7.8 HighMay 20, 2023
• luatex project luatex, miktex, tug tex live +2 more LuaTeX before 1.17.0 enables the socket library by default. CVE-2023-32668 Fix available 5.5 MediumMay 11, 2023
• tug tex live, canonical ubuntu linux, debian linux +2 more An issue was discovered in t1_check_unusual_charstring functions in writet1.c files in TeX Live... CVE-2018-17407 Fix available 7.8 HighSeptember 21, 2018
• tug tex live TeX Live through 20170524 does not validate strings before launching the program specified by the... CVE-2017-17513 8.8 HighDecember 14, 2017
• tug texlive The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and... CVE-2015-0296 4.7 MediumOctober 6, 2017
• tug texlive mktexlsr revision 36855, and before revision 36626 as packaged in texlive allows local users to... CVE-2015-5701 6.1 MediumAugust 25, 2017
• tug texlive mktexlsr revision 22855 through revision 36625 as packaged in texlive allows local users to write... CVE-2015-5700 Fix available 6.1 MediumAugust 25, 2017
• tug tex live, debian linux, fedoraproject fedora +2 more TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost... CVE-2016-10243 Fix available 9.8 CriticalMarch 7, 2017
• redhat evince, t1lib, tug tetex +2 more Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and... CVE-2010-2642 Fix available EPSS 14.3% 7.6 HighJanuary 7, 2011
• tug tetex, tex live +1 more Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX... CVE-2010-1440 Fix available 6.8 MediumMay 7, 2010
• jan-ake larsson dvipng, tug tetex +1 more Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers... CVE-2010-0829 Fix available 4.3 MediumMay 7, 2010
• tug tetex, tex live +1 more Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to... CVE-2010-0827 Fix available 6.8 MediumMay 7, 2010
• tug tetex, tex live +1 more Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2)... CVE-2010-0739 Fix available 6.8 MediumApril 16, 2010
• tug texlive 2007 feynmf.pl in feynmf 1.08, as used in TeXLive 2007, allows local users to overwrite arbitrary... CVE-2007-5940 Fix available 4.6 MediumNovember 13, 2007
• tetex, tug texlive 2007 +1 more Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow... CVE-2007-5937 Fix available 6.8 MediumNovember 13, 2007
• tetex, tug texlive 2007 +1 more dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information... CVE-2007-5936 Fix available 3.6 LowNovember 13, 2007
• tetex, tug texlive 2007 +1 more Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user... CVE-2007-5935 Fix available 6.8 MediumNovember 13, 2007