Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2019-9587

Опубликовано: 06 мар. 2019
Источник: ubuntu
Приоритет: negligible
EPSS Низкий
CVSS2: 6.8
CVSS3: 7.8

Описание

There is a stack consumption issue in md5Round1() located in Decrypt.cc in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to Catalog::countPageTree.

РелизСтатусПримечание
bionic

not-affected

code not present
cosmic

ignored

end of life
devel

not-affected

code not present
disco

not-affected

code not present
eoan

not-affected

code not present
esm-apps/bionic

not-affected

code not present
esm-apps/focal

not-affected

code not present
esm-apps/jammy

not-affected

code not present
esm-apps/noble

not-affected

code not present
esm-apps/xenial

not-affected

code not present

Показывать по

РелизСтатусПримечание
bionic

not-affected

code not present
cosmic

ignored

end of life
devel

not-affected

code not present
disco

not-affected

code not present
eoan

not-affected

code not present
esm-apps/bionic

not-affected

code not present
esm-apps/focal

not-affected

code not present
esm-apps/jammy

not-affected

code not present
esm-apps/noble

not-affected

code not present
esm-apps/xenial

not-affected

code not present

Показывать по

РелизСтатусПримечание
bionic

not-affected

0.62.0-2ubuntu2.8
cosmic

not-affected

0.68.0-0ubuntu1.6
devel

not-affected

0.76.1-0ubuntu3
disco

not-affected

0.74.0-0ubuntu1.1
eoan

not-affected

0.76.1-0ubuntu3
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was needs-triage]
esm-infra/bionic

not-affected

0.62.0-2ubuntu2.8
esm-infra/focal

not-affected

0.76.1-0ubuntu3
esm-infra/xenial

not-affected

0.41.0-0ubuntu1.13
focal

not-affected

0.76.1-0ubuntu3

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support, was deferred
cosmic

ignored

end of life
devel

deferred

disco

ignored

end of life
eoan

ignored

end of life
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was needs-triage]
esm-infra/bionic

deferred

esm-infra/focal

deferred

esm-infra/xenial

deferred

focal

ignored

end of standard support, was deferred

Показывать по

РелизСтатусПримечание
bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

esm-infra/focal

DNE

focal

DNE

groovy

DNE

hirsute

DNE

Показывать по

РелизСтатусПримечание
bionic

not-affected

code not present
cosmic

ignored

end of life
devel

not-affected

code not present
disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

not-affected

code not present
esm-apps/jammy

not-affected

code not present
esm-apps/noble

not-affected

code not present
esm-apps/xenial

not-affected

code not present
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was needs-triage]

Показывать по

EPSS

Процентиль: 56%
0.00337
Низкий

6.8 Medium

CVSS2

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
nvd
почти 7 лет назад

There is a stack consumption issue in md5Round1() located in Decrypt.cc in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to Catalog::countPageTree.

CVSS3: 7.8
debian
почти 7 лет назад

There is a stack consumption issue in md5Round1() located in Decrypt.c ...

CVSS3: 7.8
github
больше 3 лет назад

There is a stack consumption issue in md5Round1() located in Decrypt.cc in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to Catalog::countPageTree.

EPSS

Процентиль: 56%
0.00337
Низкий

6.8 Medium

CVSS2

7.8 High

CVSS3

Уязвимость CVE-2019-9587