CVE-2021-20307

Affected: libpano13

Format string vulnerability in panoFileOutputNamesCreate() in libpano13 2.9.20~rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values.

USN-6163-1 — pano13 vulnerabilities

Affected: Ubuntu:Pro:14.04:LTS: libpano13, Ubuntu:Pro:16.04:LTS: libpano13, Ubuntu:Pro:18.04:LTS: libpano13, Ubuntu:20.04:LTS: libpano13, Ubuntu:Pro:22.04:LTS: libpano13

It was discovered that pano13 did not properly validate the prefix provided for PTcrop's output. An attacker could use this issue to cause pano13 to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-20307)

It was discovered that pano13 did not properly handle certain crafted TIFF images. An attacker could use this issue to cause pano13 to crash, resulting in a denial of service. (CVE-2021-33293)

Most recent entries from all

CVE-2021-20307

USN-6163-1 — pano13 vulnerabilities