CVE-2018-5783: Medium severity Podofo Project Podofo vulnerability
Published Jan 19, 2018
·Updated
In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PoDoFo::PdfVecObjects::Reserve function (base/PdfVecObjects.h). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file.
Affected Software
13 affected componentsFixes available
Podofo Project Podofo=0.9.5
alpine/podofo<0.9.6-r0
0.9.6-r0
alpine/podofo<0.9.6-r0
0.9.6-r0
alpine/podofo<0.9.6-r0
0.9.6-r0
alpine/podofo<0.9.6-r0
0.9.6-r0
alpine/podofo<0.9.6-r0
0.9.6-r0
alpine/podofo<0.9.6-r0
0.9.6-r0
alpine/podofo<0.9.6-r0
0.9.6-r0
alpine/podofo<0.9.6-r0
0.9.6-r0
alpine/podofo<0.9.6-r0
0.9.6-r0
alpine/podofo<0.9.6-r0
0.9.6-r0
alpine/podofo<0.9.6-r0
0.9.6-r0
alpine/podofo<0.9.6-r0
0.9.6-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/podofoto a version that resolves this vulnerability.Fixed in 0.9.6-r0
Event History
Jan 19, 2018
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Data Sourced
via NVD·08:29 AM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·08:29 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-5783?
CVE-2018-5783 is categorized as a denial of service vulnerability.
2
How do I fix CVE-2018-5783?
To mitigate CVE-2018-5783, upgrade to PoDoFo version 0.9.6 or later.
3
What can an attacker do with CVE-2018-5783?
An attacker can exploit CVE-2018-5783 to cause a denial of service by sending a crafted PDF file.
4
In which software version does CVE-2018-5783 exist?
CVE-2018-5783 exists in PoDoFo version 0.9.5.
5
Which function is affected by CVE-2018-5783?
CVE-2018-5783 affects the PoDoFo::PdfVecObjects::Reserve function.