CVE-2019-19601
CVE-2019-19601
This page contains facts from public vulnerability sources. Check the original advisory before updating.
OpenDetex 2.8.5 has a Buffer Overflow in TexOpen in detex.l because of an incorrect sprintf.
CVSS 7.8 · High · EPSS 1.2%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
texlive-bin Debian:12
- Versions
- 2022.20220321.62855-5.1
- 2022.20220321.62855-5.1+deb12u1
- 2022.20220321.62855-5.1+deb12u2
- 2022.20220321.62855-6
- 2022.20220321.62855-7
- 2022.20220321.62855-8
- 2023.20230311.66589-1
- 2023.20230311.66589-2
- 2023.20230311.66589-3
- 2023.20230311.66589-4
- 2023.20230311.66589-5
- 2023.20230311.66589-6
- 2023.20230311.66589-7
- 2023.20230311.66589-8
- 2023.20230311.66589-9
- 2024.20240313.70630+ds-1
- 2024.20240313.70630+ds-2
- 2024.20240313.70630+ds-3
- 2024.20240313.70630+ds-4
- 2024.20240313.70630+ds-5
- 2024.20240313.70630+ds-6
- 2025.20250727.75242+ds-1
- 2025.20250727.75242+ds-2
- 2025.20250727.75242+ds-3
- 2025.20250727.75242+ds-4
- 2025.20250727.75242+ds-5
- 2025.20250727.75242+ds-5~hurd.1
- 2026.20260303.78225+ds-1
- 2026.20260303.78225+ds-2
- 2026.20260303.78225+ds-3
- 2026.20260303.78225+ds-4
- 2026.20260303.78225+ds-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texlive-bin Debian:13
- Versions
- 2024.20240313.70630+ds-6
- 2025.20250727.75242+ds-1
- 2025.20250727.75242+ds-2
- 2025.20250727.75242+ds-3
- 2025.20250727.75242+ds-4
- 2025.20250727.75242+ds-5
- 2025.20250727.75242+ds-5~hurd.1
- 2026.20260303.78225+ds-1
- 2026.20260303.78225+ds-2
- 2026.20260303.78225+ds-3
- 2026.20260303.78225+ds-4
- 2026.20260303.78225+ds-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
texlive-bin Debian:14
- Versions
- 2024.20240313.70630+ds-6
- 2025.20250727.75242+ds-1
- 2025.20250727.75242+ds-2
- 2025.20250727.75242+ds-3
- 2025.20250727.75242+ds-4
- 2025.20250727.75242+ds-5
- 2025.20250727.75242+ds-5~hurd.1
- 2026.20260303.78225+ds-1
- 2026.20260303.78225+ds-2
- 2026.20260303.78225+ds-3
- 2026.20260303.78225+ds-4
- 2026.20260303.78225+ds-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://github.com/pkubowicz/opendetex/issues/60
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JF3RU3VMLP5SS4MXAEKQKAGTSPN3KMHJ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KFIIVMCMPMORLPJBOULTPGJUH626DHFU/
- https://nvd.nist.gov/vuln/detail/CVE-2019-19601