CVE-2015-9252

Опубликовано: 13 фев. 2018

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral() in QPDFTokenizer.cc, related to the QPDF::resolve function in QPDF.cc.

Ссылки

https://github.com/qpdf/qpdf/commit/701b518d5c56a1449825a3a37a716c58e05e1c3e
Patch
Third Party Advisory
https://github.com/qpdf/qpdf/issues/51
Issue Tracking
Third Party Advisory
https://usn.ubuntu.com/3638-1/
https://github.com/qpdf/qpdf/commit/701b518d5c56a1449825a3a37a716c58e05e1c3e
Patch
Third Party Advisory
https://github.com/qpdf/qpdf/issues/51
Issue Tracking
Third Party Advisory
https://usn.ubuntu.com/3638-1/

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:qpdf_project:qpdf:*:*:*:*:*:*:*:*

Версия до 7.0.0 (исключая)

EPSS

Процентиль: 63%

0.01104

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-399

Связанные уязвимости

CVE-2015-9252

CVSS3: 5.5

ubuntu

больше 8 лет назад

An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral() in QPDFTokenizer.cc, related to the QPDF::resolve function in QPDF.cc.

CVE-2015-9252

CVSS3: 3.3

redhat

почти 11 лет назад

An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral() in QPDFTokenizer.cc, related to the QPDF::resolve function in QPDF.cc.

CVE-2015-9252

CVSS3: 5.5

debian

больше 8 лет назад

An issue was discovered in QPDF before 7.0.0. Endless recursion causes ...

GHSA-8xcr-vf9j-wxvr

CVSS3: 5.5

github

больше 4 лет назад

An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral() in QPDFTokenizer.cc, related to the QPDF::resolve function in QPDF.cc.

EPSS

Процентиль: 63%

0.01104

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-399