Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:2173-1

Опубликовано: 24 июн. 2024
Источник: suse-cvrf

Описание

Security update for qpdf

This update for qpdf fixes the following issues:

  • CVE-2018-9918: Fixed mishandled 'expected dictionary key but found non-name object' cases that could have allowed attackers to cause a denial of service. (bsc#1089090)

Список пакетов

SUSE Linux Enterprise Server 12 SP5
libqpdf18-7.1.1-3.11.1
qpdf-7.1.1-3.11.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libqpdf18-7.1.1-3.11.1
qpdf-7.1.1-3.11.1
SUSE Linux Enterprise Software Development Kit 12 SP5
qpdf-devel-7.1.1-3.11.1

Ссылки

Описание

libqpdf.a in QPDF through 8.0.2 mishandles certain "expected dictionary key but found non-name object" cases, allowing remote attackers to cause a denial of service (stack exhaustion), related to the QPDFObjectHandle and QPDF_Dictionary classes, because nesting in direct objects is not restricted.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:libqpdf18-7.1.1-3.11.1
SUSE Linux Enterprise Server 12 SP5:qpdf-7.1.1-3.11.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:libqpdf18-7.1.1-3.11.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:qpdf-7.1.1-3.11.1
Ссылки