CVE:CVE-2021-32434
CNNVD:CNNVD-202203-992
abcm2ps是美国Sammy S.个人开发者的一个命令行程序。可将音乐曲调从 ABC 音乐符号转换为 PostScript 或 SVG。
abcm2ps v8.14.11存在安全漏洞，该漏洞源于在draw.c的函数 calculate_beam 中包含越界读取。
solution:Upgrade abcm2ps_project abcm2ps to a higher version than 8.14.11,and avoid the version 8.14.11; Upgrade fedoraproject fedora to a higher version than 34,35,36,and avoid the version 34,35,36; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0