HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in string.c (when called from render_contents in ps-pdf.cxx) via a crafted HTML document.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2700 advisory.

  - HTMLDOC 1.9.7 allows a stack-based buffer overflow in the hd_strlcpy() function in string.c (when called     from render_contents in ps-pdf.cxx) via a crafted HTML document. (CVE-2019-19630)

  - Integer overflow in the htmldoc 1.9.11 and before may allow attackers to execute arbitrary code and cause     a denial of service that is similar to CVE-2017-9181. (CVE-2021-20308)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4696-1 advisory.

    It was discovered that HTMLDOC incorrectly handled certain HTML files. An attacker could possibly use this     issue to cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Update to latest release and include fix for CVE-2019-19630

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

In HTMLDOC, there was a one-byte underflow in htmldoc/ps-pdf.cxx caused by a floating point math difference between GCC and Clang.

For Debian 8 'Jessie', this issue has been fixed in htmldoc version 1.8.27-8+deb8u1.

We recommend that you upgrade your htmldoc packages. This upload was prepared by Utkarsh Gupta <guptautkarsh2102@gmail.com>.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
151219	Debian DLA-2700-1 : htmldoc - LTS security update	Nessus	Debian Local Security Checks	critical
145047	Ubuntu 16.04 LTS / 18.04 LTS : HTMLDOC vulnerability (USN-4696-1)	Nessus	Ubuntu Local Security Checks	high
132662	Fedora 31 : htmldoc (2019-e90a7032f2)	Nessus	Fedora Local Security Checks	high
132660	Fedora 30 : htmldoc (2019-e039dfaa30)	Nessus	Fedora Local Security Checks	high
131837	Debian DLA-2026-1 : htmldoc security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2019-19630

high

Tenable Plugins

critical

high

high

high

high