CVE-2018-17407

NONE EPSS 78.9%

Published Sep 23, 20187y ago · Modified Jun 17, 20262w ago

Published Sep 23, 2018 7y ago

Last Modified Jun 17, 2026 2w ago

Description

An issue was discovered in t1_check_unusual_charstring functions in writet1.c files in TeX Live before 2018-09-21. A buffer overflow in the handling of Type 1 fonts allows arbitrary code execution when a malicious font is loaded by one of the vulnerable tools: pdflatex, pdftex, dvips, or luatex.

Threat Intelligence

EPSS Exploit Probability

78.9% percentile

Exploit & Patch Status

No Known Exploit

Patch Available

Weaknesses 1

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer Memory Safety

Affected Products 7

Vendor	Product	Version	Range
tug	tex_live	*	<2018-09-21
canonical	ubuntu_linux	14.04	any
canonical	ubuntu_linux	16.04	any
canonical	ubuntu_linux	18.04	any
canonical	ubuntu_linux	18.10	any
debian	debian_linux	8.0	any
debian	debian_linux	9.0	any

References 5

github.com https://github.com/TeX-Live/texlive-source/commit/6ed0077520e2b0da1fd060c7f88db7b2e6068e4c

PatchThird Party Advisory
lists.debian.org https://lists.debian.org/debian-security-announce/2018/msg00230.html

Mailing ListThird Party Advisory
usn.ubuntu.com https://usn.ubuntu.com/3788-1/

Third Party Advisory
usn.ubuntu.com https://usn.ubuntu.com/3788-2/

Third Party Advisory
debian.org https://www.debian.org/security/2018/dsa-4299

Third Party Advisory

Remediation

github.com https://github.com/TeX-Live/texlive-source/commit/6ed0077520e2b0da1fd060c7f88db7b2e6068e4c

PatchThird Party Advisory