Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-3561: An Out of Bounds flaw was found in fig2dev utility within transfig. An attacker could use this flaw and provide a crafted input to read_objects() probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availability. 1955675: CVE-2021-3561 fig2dev: Global buffer overflow in fig2dev/read.c in function read_objects
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | transfig | 1:3.2.8a-2.amzn2 |
| Amazon Linux · 2 | transfig-debuginfo | 1:3.2.8a-2.amzn2 |
Vulnerabilities 1
-
Unscored —
An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in read_objects() could allow an attacker…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-3561.html