Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog
Консоль
Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog

exploitDog

ubuntu Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ

CVE-2017-9083

ΠžΠΏΡƒΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ: 19 мая 2017
Π˜ΡΡ‚ΠΎΡ‡Π½ΠΈΠΊ: ubuntu
ΠŸΡ€ΠΈΠΎΡ€ΠΈΡ‚Π΅Ρ‚: low
EPSS Низкий
CVSS2: 4.3
CVSS3: 6.5

ОписаниС

poppler 0.54.0, as used in Evince and other products, has a NULL pointer dereference in the JPXStream::readUByte function in JPXStream.cc. For example, the perf_test utility will crash (segmentation fault) when parsing an invalid PDF file.

Π Π΅Π»ΠΈΠ·Π‘Ρ‚Π°Ρ‚ΡƒΡΠŸΡ€ΠΈΠΌΠ΅Ρ‡Π°Π½ΠΈΠ΅
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was needed]
precise/esm

DNE

trusty

ignored

end of standard support
trusty/esm

DNE

trusty was needed
upstream

needed

ΠŸΠΎΠΊΠ°Π·Ρ‹Π²Π°Ρ‚ΡŒ ΠΏΠΎ

Π Π΅Π»ΠΈΠ·Π‘Ρ‚Π°Ρ‚ΡƒΡΠŸΡ€ΠΈΠΌΠ΅Ρ‡Π°Π½ΠΈΠ΅
artful

released

0.48.0-2ubuntu3
bionic

released

0.48.0-2ubuntu3
cosmic

released

0.48.0-2ubuntu3
devel

released

0.48.0-2ubuntu3
disco

released

0.48.0-2ubuntu3
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [0.24.5-2ubuntu4.5]]
esm-infra/bionic

released

0.48.0-2ubuntu3
esm-infra/xenial

released

0.41.0-0ubuntu1.2
precise/esm

DNE

trusty

released

0.24.5-2ubuntu4.5

ΠŸΠΎΠΊΠ°Π·Ρ‹Π²Π°Ρ‚ΡŒ ΠΏΠΎ

Π Π΅Π»ΠΈΠ·Π‘Ρ‚Π°Ρ‚ΡƒΡΠŸΡ€ΠΈΠΌΠ΅Ρ‡Π°Π½ΠΈΠ΅
artful

not-affected

code not built
bionic

not-affected

code not built
cosmic

not-affected

code not built
devel

not-affected

code not built
disco

not-affected

code not built
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [code not built]]
esm-infra/bionic

not-affected

code not built
esm-infra/xenial

not-affected

code not built
precise/esm

DNE

trusty

not-affected

code not built

ΠŸΠΎΠΊΠ°Π·Ρ‹Π²Π°Ρ‚ΡŒ ΠΏΠΎ

EPSS

ΠŸΡ€ΠΎΡ†Π΅Π½Ρ‚ΠΈΠ»ΡŒ: 71%
0.00676
Низкий

4.3 Medium

CVSS2

6.5 Medium

CVSS3

БвязанныС уязвимости

CVSS3: 3.3
redhat
большС 8 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

poppler 0.54.0, as used in Evince and other products, has a NULL pointer dereference in the JPXStream::readUByte function in JPXStream.cc. For example, the perf_test utility will crash (segmentation fault) when parsing an invalid PDF file.

CVSS3: 6.5
nvd
большС 8 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

poppler 0.54.0, as used in Evince and other products, has a NULL pointer dereference in the JPXStream::readUByte function in JPXStream.cc. For example, the perf_test utility will crash (segmentation fault) when parsing an invalid PDF file.

CVSS3: 6.5
debian
большС 8 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

poppler 0.54.0, as used in Evince and other products, has a NULL point ...

CVSS3: 6.5
github
большС 3 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

poppler 0.54.0, as used in Evince and other products, has a NULL pointer dereference in the JPXStream::readUByte function in JPXStream.cc. For example, the perf_test utility will crash (segmentation fault) when parsing an invalid PDF file.

suse-cvrf
большС 8 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

Security update for poppler

EPSS

ΠŸΡ€ΠΎΡ†Π΅Π½Ρ‚ΠΈΠ»ΡŒ: 71%
0.00676
Низкий

4.3 Medium

CVSS2

6.5 Medium

CVSS3

Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ CVE-2017-9083