CVE-2017-8378
Heap-based buffer overflow in the PdfParser::ReadObjects function in b ...
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD.
Açıklama
Heap-based buffer overflow in the PdfParser::ReadObjects function in base/PdfParser.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors related to m_offsets.size.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| alpine 3.13 | podofo | 0.9.6-r0 |
| alpine 3.14 | podofo | 0.9.6-r0 |
| alpine 3.15 | podofo | 0.9.6-r0 |
| alpine 3.16 | podofo | 0.9.6-r0 |
| alpine 3.17 | podofo | 0.9.6-r0 |
| alpine 3.18 | podofo | 0.9.6-r0 |
| alpine 3.19 | podofo | 0.9.6-r0 |
| alpine 3.20 | podofo | 0.9.6-r0 |
| alpine 3.21 | podofo | 0.9.6-r0 |
| alpine 3.22 | podofo | 0.9.6-r0 |
| alpine 3.23 | podofo | 0.9.6-r0 |
| alpine 3.24 | podofo | 0.9.6-r0 |
21 kaynaktaki 21 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| alpine 3.13 | podofo | 0.9.6-r0 |
| alpine 3.14 | podofo | 0.9.6-r0 |
| alpine 3.15 | podofo | 0.9.6-r0 |
| alpine 3.16 | podofo | 0.9.6-r0 |
| alpine 3.17 | podofo | 0.9.6-r0 |
| alpine 3.18 | podofo | 0.9.6-r0 |
| alpine 3.19 | podofo | 0.9.6-r0 |
| alpine 3.20 | podofo | 0.9.6-r0 |
| alpine 3.21 | podofo | 0.9.6-r0 |
| alpine 3.22 | podofo | 0.9.6-r0 |
| alpine 3.23 | podofo | 0.9.6-r0 |
| alpine 3.24 | podofo | 0.9.6-r0 |
| alpine edge | podofo | 0.9.6-r0 |
| debian 11 | libpodofo | 0.9.5-9 |
| debian 12 | libpodofo | 0.9.5-9 |
| debian 13 | libpodofo | 0.9.5-9 |
| debian 14 | libpodofo | 0.9.5-9 |
| debian 7 | libpodofo | düzeltme belirtilmemiş |
| debian 8 | libpodofo | düzeltme belirtilmemiş |
| debian 9 | libpodofo | düzeltme belirtilmemiş |
| echo | libpodofo | 0.9.5-9 |