Ubuntu update for fig2dev



Risk Medium
Patch available YES
Number of vulnerabilities 6
CVE-ID CVE-2020-21680
CVE-2020-21682
CVE-2020-21683
CVE-2025-31162
CVE-2025-31163
CVE-2025-31164
CWE-ID CWE-121
CWE-120
CWE-682
CWE-119
CWE-122
Exploitation vector Network
Public exploit N/A
Vulnerable software
 Ubuntu
Operating systems & Components / Operating system

fig2dev (Ubuntu package)
Operating systems & Components / Operating system package or component

Vendor Canonical Ltd.

Security Bulletin

This security bulletin contains information about 6 vulnerabilities.

1) Stack-based buffer overflow

EUVDB-ID: #VU111998

Risk: Medium

CVSSv4.0: 1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2020-21680

CWE-ID: CWE-121 - Stack-based buffer overflow

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error when converting a xfig file into pict2e format. A remote attacker can trigger a stack-based buffer overflow and crash the application. 

Mitigation

Update the affected package fig2dev to the latest version.

Vulnerable software versions

Ubuntu: 18.04 - 24.10

fig2dev (Ubuntu package): before 1:3.2.6a-6ubuntu1.1+esm1

CPE2.3 External links

https://ubuntu.com/security/notices/USN-7587-1


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Buffer overflow

EUVDB-ID: #VU112002

Risk: Medium

CVSSv4.0: 1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2020-21682

CWE-ID: CWE-120 - Buffer overflow

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error within the set_fill component in genge.c when converting a xfig file into ge format. A remote attacker can pass a specially crafted file to the application and crash it.

Mitigation

Update the affected package fig2dev to the latest version.

Vulnerable software versions

Ubuntu: 18.04 - 24.10

fig2dev (Ubuntu package): before 1:3.2.6a-6ubuntu1.1+esm1

CPE2.3 External links

https://ubuntu.com/security/notices/USN-7587-1


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Buffer overflow

EUVDB-ID: #VU112001

Risk: Medium

CVSSv4.0: 1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2020-21683

CWE-ID: CWE-120 - Buffer overflow

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error within the shade_or_tint_name_after_declare_color() function in fig2dev/dev/genpstricks.c when converting a xfig file into pstricks format. A remote attacker can pass a specially crafted file to the application and crash it.

Mitigation

Update the affected package fig2dev to the latest version.

Vulnerable software versions

Ubuntu: 18.04 - 24.10

fig2dev (Ubuntu package): before 1:3.2.6a-6ubuntu1.1+esm1

CPE2.3 External links

https://ubuntu.com/security/notices/USN-7587-1


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Incorrect calculation

EUVDB-ID: #VU106983

Risk: Low

CVSSv4.0: 1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-31162

CWE-ID: CWE-682 - Incorrect Calculation

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a floating point exception within the get_slope() function. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.

Mitigation

Update the affected package fig2dev to the latest version.

Vulnerable software versions

Ubuntu: 18.04 - 24.10

fig2dev (Ubuntu package): before 1:3.2.6a-6ubuntu1.1+esm1

CPE2.3 External links

https://ubuntu.com/security/notices/USN-7587-1


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Buffer overflow

EUVDB-ID: #VU106982

Risk: Low

CVSSv4.0: 1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-31163

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error within the put_patternarc() function. A remote attacker can pass specially crafted input to the application, trigger memory corruption and crash the application.

Mitigation

Update the affected package fig2dev to the latest version.

Vulnerable software versions

Ubuntu: 18.04 - 24.10

fig2dev (Ubuntu package): before 1:3.2.6a-6ubuntu1.1+esm1

CPE2.3 External links

https://ubuntu.com/security/notices/USN-7587-1


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Heap-based buffer overflow

EUVDB-ID: #VU106981

Risk: Low

CVSSv4.0: 1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-31164

CWE-ID: CWE-122 - Heap-based Buffer Overflow

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error within the create_line_with_spline() function. A remote attacker can pass specially crafted data to the application, trigger a heap-based buffer overflow and perform a denial of service (DoS) attack.

Mitigation

Update the affected package fig2dev to the latest version.

Vulnerable software versions

Ubuntu: 18.04 - 24.10

fig2dev (Ubuntu package): before 1:3.2.6a-6ubuntu1.1+esm1

CPE2.3 External links

https://ubuntu.com/security/notices/USN-7587-1


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###