Description
There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5. A crafted input will lead to a remote denial of service attack. Later Ubuntu packages such as for Poppler 0.41.0 are not affected.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-1562-1 | poppler security update |
EUVD |
EUVD-2018-2838 | There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5. A crafted input will lead to a remote denial of service attack. Later Ubuntu packages such as for Poppler 0.41.0 are not affected. |
Ubuntu USN |
USN-3647-1 | poppler vulnerabilities |
References
History
No history.
Subscriptions
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-05T07:46:47.416Z
Reserved: 2018-05-06T00:00:00.000Z
Link: CVE-2018-10768
No data.
Status : Modified
Published: 2018-05-06T23:29:00.300
Modified: 2024-11-21T03:42:00.397
Link: CVE-2018-10768
OpenCVE Enrichment
No data.
Weaknesses
Debian DLA
EUVD
Ubuntu USN