Описание
The tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arrays and dictionaries, which allows remote attackers to cause a denial of service (stack consumption and segmentation fault) or possibly have unspecified other impact via a PDF document with a deep data structure, as demonstrated by a crash in QPDFObjectHandle::parseInternal in libqpdf/QPDFObjectHandle.cc.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 7.0.0-1 |
| bionic | not-affected | 7.0.0-1 |
| devel | not-affected | 7.0.0-1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [8.0.2-3~14.04.1]] |
| esm-infra/bionic | not-affected | 7.0.0-1 |
| esm-infra/xenial | released | 8.0.2-3~16.04.1 |
| precise/esm | DNE | |
| trusty | released | 8.0.2-3~14.04.1 |
| trusty/esm | DNE | trusty was released [8.0.2-3~14.04.1] |
| upstream | released | 7.0.0-1 |
Показывать по
EPSS
6.8 Medium
CVSS2
7.8 High
CVSS3
Связанные уязвимости
The tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arrays and dictionaries, which allows remote attackers to cause a denial of service (stack consumption and segmentation fault) or possibly have unspecified other impact via a PDF document with a deep data structure, as demonstrated by a crash in QPDFObjectHandle::parseInternal in libqpdf/QPDFObjectHandle.cc.
The tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arrays and dictionaries, which allows remote attackers to cause a denial of service (stack consumption and segmentation fault) or possibly have unspecified other impact via a PDF document with a deep data structure, as demonstrated by a crash in QPDFObjectHandle::parseInternal in libqpdf/QPDFObjectHandle.cc.
The tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arrays and dic ...
The tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arrays and dictionaries, which allows remote attackers to cause a denial of service (stack consumption and segmentation fault) or possibly have unspecified other impact via a PDF document with a deep data structure, as demonstrated by a crash in QPDFObjectHandle::parseInternal in libqpdf/QPDFObjectHandle.cc.
EPSS
6.8 Medium
CVSS2
7.8 High
CVSS3