Summary
It was discovered that pano13 did not properly validate the prefix provided
for PTcrop's output. An attacker could use this issue to cause pano13 to
crash, resulting in a denial of service, or possibly execute arbitrary
code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS,
Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-20307)
It was discovered that pano13 did not properly handle certain crafted TIFF
images. An attacker could use this issue to cause pano13 to crash,
resulting in a denial of service. (CVE-2021-33293)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | libpano13 | 2.9.19+dfsg-3ubuntu0.20.04.1 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | libpano13 | 2.9.18+dfsg-6ubuntu2+esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | libpano13 | 2.9.19+dfsg-2ubuntu0.1~esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | libpano13 | 2.9.19+dfsg-3ubuntu0.18.04.1~esm1 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | libpano13 | 2.9.20~rc3+dfsg-1ubuntu0.1~esm1 |
Vulnerabilities 2
-
Unscored —
Format string vulnerability in panoFileOutputNamesCreate() in libpano13 2.9.20~rc2+dfsg-3 and earlier can lead to read …
-
Unscored —
Panorama Tools libpano13 v2.9.20 was discovered to contain an out-of-bounds read in the function panoParserFindOLine() …