Linux · Ubuntu · Package update · July 18, 2023

htmldoc-common 1.9.2-1ubuntu0.2+esm1: htmldoc-common 1.9.2-1ubuntu0.2+esm1 for Ubuntu 18.04.6 LTS (bionic)

htmldoc-common 1.9.2-1ubuntu0.2+esm1, released July 18, 2023, fixes 11 CVEs in htmldoc-common. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
11
1 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0735
94th percentile

Priority of the 11 CVEs

Patch now 0 Urgent 1 High 8 Routine 2

Fixed package versions

ProductReleaseFixed in
htmldoc-commonUbuntu 18.04.6 LTS (bionic)1.9.2-1ubuntu0.2+esm1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2021-23158 htmldoc: A flaw was found in htmldoc in v1.9.129.8 0.0244 None reported
High CVE-2021-43579 htmldoc: A stack-based buffer overflow in image_load_bmp() in HTMLDOC <= 1.9.13 results in remote code execution if the victim...7.8 0.0735 None reported
High CVE-2021-23206 htmldoc: A flaw was found in htmldoc in v1.9.12 and prior7.8 0.0148 None reported
High CVE-2021-26259 htmldoc: A flaw was found in htmldoc in v1.9.127.8 0.0122 None reported
High CVE-2021-23191 htmldoc: A security issue was found in htmldoc v1.9.12 and before7.8 0.0110 None reported
High CVE-2021-26252 htmldoc: A flaw was found in htmldoc in v1.9.127.8 0.0096 None reported
High CVE-2021-26948 htmldoc: Null pointer dereference in the htmldoc v1.9.11 and before may allow attackers to execute arbitrary code and cause a...7.8 0.0084 None reported
High CVE-2021-34119 htmldoc: A flaw was discovered in htmodoc 1.9.12 in function parse_paragraph in ps-pdf.cxx ,this flaw possibly allows possible...7.8 0.0034 None reported
High CVE-2021-34121 htmldoc: An Out of Bounds flaw was discovered in htmodoc 1.9.12 in function parse_tree() in toc.cxx, this possibly leads to me...7.8 0.0034 None reported
Routine CVE-2021-20308 htmldoc: Integer overflow in the htmldoc 1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of...n/a 0.0248 None reported
Routine CVE-2021-40985 htmldoc: A stack-based buffer under-read in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted...n/a 0.0094 None reported
Showing 1 to 11 of 11 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.