CVE-2017-8053: Medium severity Podofo Project Podofo vulnerability
Published Apr 22, 2017
·Updated
PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (PdfParser.cpp).
Affected Software
13 affected componentsFixes available
Podofo Project Podofo=0.9.5
alpine/podofo<0.9.6-r0
0.9.6-r0
alpine/podofo<0.9.6-r0
0.9.6-r0
alpine/podofo<0.9.6-r0
0.9.6-r0
alpine/podofo<0.9.6-r0
0.9.6-r0
alpine/podofo<0.9.6-r0
0.9.6-r0
alpine/podofo<0.9.6-r0
0.9.6-r0
alpine/podofo<0.9.6-r0
0.9.6-r0
alpine/podofo<0.9.6-r0
0.9.6-r0
alpine/podofo<0.9.6-r0
0.9.6-r0
alpine/podofo<0.9.6-r0
0.9.6-r0
alpine/podofo<0.9.6-r0
0.9.6-r0
alpine/podofo<0.9.6-r0
0.9.6-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/podofoto a version that resolves this vulnerability.Fixed in 0.9.6-r0
Event History
Apr 22, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:59 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·09:59 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-8053?
CVE-2017-8053 has been assigned a medium severity rating due to its potential for causing denial of service.
2
How do I fix CVE-2017-8053?
To fix CVE-2017-8053, update to a version of PoDoFo that addresses this vulnerability.
3
What type of vulnerability is CVE-2017-8053?
CVE-2017-8053 is classified as a denial of service vulnerability.
4
What impact does CVE-2017-8053 have on PoDoFo 0.9.5?
CVE-2017-8053 causes infinite recursion and stack consumption, leading to a denial of service.
5
Is CVE-2017-8053 related to PDF files?
Yes, CVE-2017-8053 is triggered by a crafted PDF file processed by PoDoFo.