CVE:CVE-2019-15144
CNNVD:CNNVD-201908-1211
DjVuLibre是一款DjVu（计算机文件格式）的开源实现，它包括DjVu文件查看器、浏览器插件、DjVu文件解码/编码器和其它实用程序。
DjVuLibre 3.5.27版本中存在资源管理错误漏洞。该漏洞源于网络系统或产品对系统资源（如内存、磁盘空间、文件等）的管理不当。
solution:Upgrade djvulibre_project djvulibre to a higher version than 3.5.27,and avoid the version 3.5.27; Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,11.0,and avoid the version 8.0,9.0,10.0,11.0; Upgrade fedoraproject fedora to a higher version than 29,30,31,and avoid the version 29,30,31; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,19.04,19.10,and avoid the version 16.04,18.04,19.04,19.10; Upgrade opensuse leap to a higher version than 15.0,15.1,and avoid the version 15.0,15.1
solution:Upgrade gnu gcc to a higher version than 7.5.0,8.4.0,9.3.0,10.1.0,and avoid the version (,7.5.0),[8.0,8.4.0),[9.0,9.3.0),[10.0,10.1.0); Upgrade opensuse leap to a higher version than 15.0,15.1,and avoid the version 15.0,15.1