CVE-2018-1000036

Опубликовано: 24 мая 2018

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a denial of service (memory leak) via a crafted file.

Ссылки

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5502
Exploit
Issue Tracking
Third Party Advisory
https://bugs.ghostscript.com/show_bug.cgi?id=698887
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=8aa2bd34065d2844aae778bd4cc20c74bbcd9406
https://lists.debian.org/debian-lts-announce/2021/09/msg00013.html
Mailing List
Third Party Advisory
https://security.gentoo.org/glsa/201811-15
Third Party Advisory
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5502
Exploit
Issue Tracking
Third Party Advisory
https://bugs.ghostscript.com/show_bug.cgi?id=698887
https://lists.debian.org/debian-lts-announce/2021/09/msg00013.html
Mailing List
Third Party Advisory
https://security.gentoo.org/glsa/201811-15
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:artifex:mupdf:*:*:*:*:*:*:*:*

Версия до 1.12.0 (включая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 64%

0.00479

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-772

Связанные уязвимости

CVE-2018-1000036

CVSS3: 5.5

ubuntu

больше 7 лет назад

In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a denial of service (memory leak) via a crafted file.

CVE-2018-1000036

CVSS3: 5.5

debian

больше 7 лет назад

In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF ...

GHSA-cqwp-8vf4-jg4p

CVSS3: 5.5

github

больше 3 лет назад

In MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a denial of service (memory leak) via a crafted file.

EPSS

Процентиль: 64%

0.00479

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-772