Описание
A flaw was found in PoDoFo 0.9.7. A stack-based buffer overflow in PdfEncryptMD5Base::ComputeOwnerKey function in PdfEncrypt.cpp is possible because of a improper check of the keyLength value.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libpodofo | unfixed | package | ||
| libpodofo | postponed | trixie | package | |
| libpodofo | postponed | bookworm | package | |
| libpodofo | no-dsa | bullseye | package | |
| libpodofo | no-dsa | buster | package | |
| libpodofo | postponed | stretch | package |
Примечания
https://sourceforge.net/p/podofo/tickets/132/
EPSS
Связанные уязвимости
A flaw was found in PoDoFo 0.9.7. A stack-based buffer overflow in PdfEncryptMD5Base::ComputeOwnerKey function in PdfEncrypt.cpp is possible because of a improper check of the keyLength value.
A flaw was found in PoDoFo 0.9.7. A stack-based buffer overflow in PdfEncryptMD5Base::ComputeOwnerKey function in PdfEncrypt.cpp is possible because of a improper check of the keyLength value.
A flaw was found in PoDoFo 0.9.7. A stack-based buffer overflow in PdfEncryptMD5Base::ComputeOwnerKey function in PdfEncrypt.cpp is possible because of a improper check of the keyLength value.
ALT-PU-2023-5043: package `podofo` update to version 0.9.8-alt1
ALT-PU-2023-4738: package `podofo` update to version 0.9.8-alt1
EPSS