Описание
libqpdf.a in QPDF through 8.0.2 mishandles certain "expected dictionary key but found non-name object" cases, allowing remote attackers to cause a denial of service (stack exhaustion), related to the QPDFObjectHandle and QPDF_Dictionary classes, because nesting in direct objects is not restricted.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | released | 8.0.2-3~17.10.1 |
| bionic | not-affected | 8.0.2-3 |
| devel | not-affected | 8.0.2-3 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [8.0.2-3~14.04.1]] |
| esm-infra/bionic | not-affected | 8.0.2-3 |
| esm-infra/xenial | released | 8.0.2-3~16.04.1 |
| precise/esm | DNE | |
| trusty | released | 8.0.2-3~14.04.1 |
| trusty/esm | DNE | trusty was released [8.0.2-3~14.04.1] |
| upstream | needs-triage |
Показывать по
6.8 Medium
CVSS2
7.8 High
CVSS3
Связанные уязвимости
libqpdf.a in QPDF through 8.0.2 mishandles certain "expected dictionary key but found non-name object" cases, allowing remote attackers to cause a denial of service (stack exhaustion), related to the QPDFObjectHandle and QPDF_Dictionary classes, because nesting in direct objects is not restricted.
libqpdf.a in QPDF through 8.0.2 mishandles certain "expected dictionary key but found non-name object" cases, allowing remote attackers to cause a denial of service (stack exhaustion), related to the QPDFObjectHandle and QPDF_Dictionary classes, because nesting in direct objects is not restricted.
libqpdf.a in QPDF through 8.0.2 mishandles certain "expected dictionar ...
libqpdf.a in QPDF through 8.0.2 mishandles certain "expected dictionary key but found non-name object" cases, allowing remote attackers to cause a denial of service (stack exhaustion), related to the QPDFObjectHandle and QPDF_Dictionary classes, because nesting in direct objects is not restricted.
6.8 Medium
CVSS2
7.8 High
CVSS3