A security issue was found in htmldoc v1.9.12 and before. A NULL pointer dereference in the function image_load_jpeg() in image.cxx may result in denial of service.
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Htmldoc | Htmldoc_project | * | 1.9.12 (including) |
| Htmldoc | Ubuntu | bionic | * |
| Htmldoc | Ubuntu | esm-apps/bionic | * |
| Htmldoc | Ubuntu | esm-apps/focal | * |
| Htmldoc | Ubuntu | esm-apps/xenial | * |
| Htmldoc | Ubuntu | esm-infra-legacy/trusty | * |
| Htmldoc | Ubuntu | focal | * |
| Htmldoc | Ubuntu | groovy | * |
| Htmldoc | Ubuntu | hirsute | * |
| Htmldoc | Ubuntu | impish | * |
| Htmldoc | Ubuntu | kinetic | * |
| Htmldoc | Ubuntu | lunar | * |
| Htmldoc | Ubuntu | mantic | * |
| Htmldoc | Ubuntu | trusty | * |
| Htmldoc | Ubuntu | trusty/esm | * |
| Htmldoc | Ubuntu | upstream | * |
| Htmldoc | Ubuntu | xenial | * |
Potential Mitigations
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1967022
- https://github.com/michaelrsweet/htmldoc/commit/369b2ea1fd0d0537ba707f20a2f047b6afd2fbdc
- https://github.com/michaelrsweet/htmldoc/issues/415
- https://ubuntu.com/security/CVE-2021-23191
- https://bugzilla.redhat.com/show_bug.cgi?id=1967022
- https://github.com/michaelrsweet/htmldoc/commit/369b2ea1fd0d0537ba707f20a2f047b6afd2fbdc
- https://github.com/michaelrsweet/htmldoc/issues/415
- https://ubuntu.com/security/CVE-2021-23191