Advisories ยป MGASA-2018-0465

Updated poppler packages fix security vulnerabilities

Publication date: 22 Nov 2018
Modification date: 22 Nov 2018
Type: security
Affected Mageia releases : 6
CVE: CVE-2018-16646 , CVE-2018-19058 , CVE-2018-19059 , CVE-2018-19060

Description

In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause
infinite recursion via a crafted file. A remote attacker can leverage
this for a DoS attack. (CVE-2018-16646)

An issue was discovered in Poppler 0.71.0. There is a reachable abort in
Object.h, will lead to denial of service because EmbFile::save2 in
FileSpec.cc lacks a stream check before saving an embedded file.
(CVE-2018-19058)

An issue was discovered in Poppler 0.71.0. There is a out-of-bounds read
in EmbFile::save2 in FileSpec.cc, will lead to denial of service, as
demonstrated by utils/pdfdetach.cc not validating embedded files before
save attempts. (CVE-2018-19059)

An issue was discovered in Poppler 0.71.0. There is a NULL pointer
dereference in goo/GooString.h, will lead to denial of service, as
demonstrated by utils/pdfdetach.cc not validating a filename of an
embedded file before constructing a save path. (CVE-2018-19060)

References

SRPMS

6/core