ISOMAN

CVE

CVE-2018-10768

There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5. A crafted input will lead to a remote denial of service attack. Later Ubuntu packages such as for Poppler 0.41.0 are not affected.

Severity
MEDIUM
CVSS
6.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. https://access.redhat.com/errata/RHBA-2019:0327
  2. https://access.redhat.com/errata/RHSA-2018:3140
  3. https://access.redhat.com/errata/RHSA-2018:3505
  4. https://bugs.freedesktop.org/show_bug.cgi?id=106408
  5. https://lists.debian.org/debian-lts-announce/2018/10/msg00024.html
  6. https://usn.ubuntu.com/3647-1/
  7. https://access.redhat.com/errata/RHBA-2019:0327
  8. https://access.redhat.com/errata/RHSA-2018:3140
  9. https://access.redhat.com/errata/RHSA-2018:3505
  10. https://bugs.freedesktop.org/show_bug.cgi?id=106408
  11. https://lists.debian.org/debian-lts-announce/2018/10/msg00024.html
  12. https://usn.ubuntu.com/3647-1/