ISOMAN

CVE

CVE-2018-13988

Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by pdfunite. This can result in memory corruption and denial of service. This may be exploitable when a victim opens a specially crafted PDF file.

Severity
MEDIUM
CVSS
6.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://packetstormsecurity.com/files/148661/PDFunite-0.62.0-Buffer-Overflow.html
  2. https://access.redhat.com/errata/RHBA-2019:0327
  3. https://access.redhat.com/errata/RHSA-2018:3140
  4. https://access.redhat.com/errata/RHSA-2018:3505
  5. https://bugzilla.novell.com/show_bug.cgi?id=CVE-2018-13988
  6. https://bugzilla.redhat.com/show_bug.cgi?id=1602838
  7. https://cgit.freedesktop.org/poppler/poppler/commit/?id=004e3c10df0abda214f0c293f9e269fdd979c5ee
  8. https://lists.debian.org/debian-lts-announce/2018/10/msg00024.html
  9. https://usn.ubuntu.com/3757-1/
  10. http://packetstormsecurity.com/files/148661/PDFunite-0.62.0-Buffer-Overflow.html
  11. https://access.redhat.com/errata/RHBA-2019:0327
  12. https://access.redhat.com/errata/RHSA-2018:3140
  13. https://access.redhat.com/errata/RHSA-2018:3505
  14. https://bugzilla.novell.com/show_bug.cgi?id=CVE-2018-13988
  15. https://bugzilla.redhat.com/show_bug.cgi?id=1602838
  16. https://cgit.freedesktop.org/poppler/poppler/commit/?id=004e3c10df0abda214f0c293f9e269fdd979c5ee
  17. https://lists.debian.org/debian-lts-announce/2018/10/msg00024.html
  18. https://usn.ubuntu.com/3757-1/