CVE-2019-18804

Published: 7 November 2019

DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.

Priority

CVSS 3 base score: 7.5

Status

Package	Release	Status
djvulibre Launchpad, Ubuntu, Debian	bionic	Released (3.5.27.1-8ubuntu0.1)
	disco	Released (3.5.27.1-10ubuntu0.1)
	eoan	Released (3.5.27.1-13ubuntu0.1)
	precise	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Released (3.5.27.1-5ubuntu0.1)

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.