Описание
Security update for podofo
This update for podofo fixes the following issues:
- CVE-2018-8002: infinite loop vulnerability in ParseFileComplete() (bsc#1084891).
- CVE-2020-18971: stack-based buffer overflow in src/base/PdfDictionary.cpp (bsc#1190178).
- CVE-2021-30470: uncontrolled recursive call of funtions in src/base/PdfTokenizer.cpp can lead to a stack overflow (bsc#1186588).
- CVE-2021-30471: uncontrolled recursive call in PdfNamesTree:AddToDictionary function in src/podofo/doc/PdfNamesTree.cpp (bsc#1184645).
Список пакетов
SUSE Linux Enterprise Module for Package Hub 15 SP7
Ссылки
- Link for SUSE-SU-2026:4311-1
- E-Mail link for SUSE-SU-2026:4311-1
- SUSE Security Ratings
- SUSE Bug 1084891
- SUSE Bug 1184645
- SUSE Bug 1186588
- SUSE Bug 1190178
- SUSE CVE CVE-2018-8002 page
- SUSE CVE CVE-2020-18971 page
- SUSE CVE CVE-2021-30470 page
- SUSE CVE CVE-2021-30471 page
Описание
In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.
Затронутые продукты
Ссылки
- CVE-2018-8002
- SUSE Bug 1084891
Описание
Stack-based Buffer Overflow in PoDoFo v0.9.6 allows attackers to cause a denial of service via the component 'src/base/PdfDictionary.cpp:65'.
Затронутые продукты
Ссылки
- CVE-2020-18971
- SUSE Bug 1190178
Описание
A flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call among PdfTokenizer::ReadArray(), PdfTokenizer::GetNextVariant() and PdfTokenizer::ReadDataType() functions can lead to a stack overflow.
Затронутые продукты
Ссылки
- CVE-2021-30470
- SUSE Bug 1186588
Описание
A flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call in PdfNamesTree::AddToDictionary function in src/podofo/doc/PdfNamesTree.cpp can lead to a stack overflow.
Затронутые продукты
Ссылки
- CVE-2021-30471
- SUSE Bug 1184645