Описание
A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget() in pdftranslator.cpp of PoDoFo 0.9.6, while creating the PdfXObject, as demonstrated by podofoimpose. It allows an attacker to cause Denial of Service.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| cosmic | ignored | end of life |
| devel | not-affected | 0.9.6+dfsg-5 |
| disco | not-affected | 0.9.6+dfsg-4 |
| eoan | not-affected | 0.9.6+dfsg-5 |
| esm-apps-legacy/xenial | needed | |
| esm-apps/bionic | needed | |
| esm-apps/focal | not-affected | 0.9.6+dfsg-5 |
| esm-apps/jammy | not-affected | 0.9.6+dfsg-5 |
| esm-apps/noble | not-affected | 0.9.6+dfsg-5 |
Показывать по
EPSS
6.8 Medium
CVSS2
8.8 High
CVSS3
Связанные уязвимости
A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget() in pdftranslator.cpp of PoDoFo 0.9.6, while creating the PdfXObject, as demonstrated by podofoimpose. It allows an attacker to cause Denial of Service.
A NULL pointer dereference vulnerability exists in the function PdfTra ...
A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget() in pdftranslator.cpp of PoDoFo 0.9.6, while creating the PdfXObject, as demonstrated by podofoimpose. It allows an attacker to cause Denial of Service.
ALT-PU-2021-1684: package `podofo` update to version 0.9.7-alt1
EPSS
6.8 Medium
CVSS2
8.8 High
CVSS3