Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2018-7441 →
DEBIAN-CVE-2018-7441
Leptonica through 1.75.3 uses hardcoded /tmp pathnames, which might allow local users to overwrite arbitrary files or have unspecified other impact by...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Leptonica through 1.75.3 uses hardcoded /tmp pathnames, which might allow local users to overwrite arbitrary files or have unspecified other impact by creating files in advance or winning a race condition, as demonstrated by /tmp/junk_split_image.ps in prog/splitimage2pdf.c.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
leptonlib
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.76.0-1"}]}]
Debian:13
leptonlib
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.76.0-1"}]}]
Debian:14
leptonlib
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.76.0-1"}]}]
Références
- advisory security-tracker.debian.org