Описание
A flaw was found in PoDoFo 0.9.7. An use-after-free in PoDoFo::PdfVecObjects::Clear() function can cause a denial of service via a crafted PDF file.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libpodofo | unfixed | package | ||
| libpodofo | postponed | trixie | package | |
| libpodofo | postponed | bookworm | package | |
| libpodofo | no-dsa | bullseye | package | |
| libpodofo | no-dsa | buster | package | |
| libpodofo | postponed | stretch | package |
Примечания
https://sourceforge.net/p/podofo/tickets/129/
EPSS
Связанные уязвимости
A flaw was found in PoDoFo 0.9.7. An use-after-free in PoDoFo::PdfVecObjects::Clear() function can cause a denial of service via a crafted PDF file.
A flaw was found in PoDoFo 0.9.7. An use-after-free in PoDoFo::PdfVecObjects::Clear() function can cause a denial of service via a crafted PDF file.
A flaw was found in PoDoFo 0.9.7. An use-after-free in PoDoFo::PdfVecObjects::Clear() function can cause a denial of service via a crafted PDF file.
ALT-PU-2023-5043: package `podofo` update to version 0.9.8-alt1
ALT-PU-2023-4738: package `podofo` update to version 0.9.8-alt1
EPSS