Buffer overflow in fig2dev - CVE-2020-21682

Vulnerability identifier: #VU112002

CSH Severity: Medium

CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-21682

CWE-ID: CWE-120

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error within the set_fill component in genge.c when converting a xfig file into ge format. A remote attacker can pass a specially crafted file to the application and crash it.

fig2dev
SUSE Linux Enterprise Workstation Extension
Ubuntu
fig2dev (Ubuntu package)
transfig
transfig-debuginfo
transfig-debugsource

Install updates from vendor's website.

fig2dev - update to 3.2.8
fig2dev (Ubuntu package) - addressed in versions 1:3.2.6a-6ubuntu1.1+esm1, 1:3.2.7a-7ubuntu0.1+esm1, 1:3.2.8b-1ubuntu0.1~esm1, 1:3.2.9-3ubuntu0.1~esm1, 1:3.2.9-4ubuntu0.1
transfig - update to 3.2.8b-4.15.1
transfig-debuginfo - update to 3.2.8b-4.15.1
transfig-debugsource - update to 3.2.8b-4.15.1

• https://sourceforge.net/p/mcj/tickets/72/
• https://sourceforge.net/u/hamarituc/fig2dev/ci/4d4e1fdac467c386cba8706aa0067d5ab8da02d7/

• Multiple vulnerabilities in fig2dev
• Ubuntu update for fig2dev
• SUSE update for transfig