CVE-2019-1010190

Name of the Vulnerable Software and Affected Versions: mgetty versions prior to 1.2.1

Description: The issue is related to an out-of-bounds read, which can cause a denial of service (DoS) and potentially crash the program if the memory is not mapped. This is due to the putwhitespan() function in g3/pbm2g3.c. The attack vector is local, requiring the victim to open a specially crafted file.

Recommendations: For versions prior to 1.2.1, update to version 1.2.1 to resolve the issue. As a temporary workaround, consider avoiding the use of the putwhitespan() function in g3/pbm2g3.c until the update is applied. Restrict access to specially crafted files to minimize the risk of exploitation.