CVE-2019-20093: Null Pointer Dereference
The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file, because of ImageExtractor.cpp.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/podofoto a version that resolves this vulnerability.Fixed in 0.9.7-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2019-20093?
CVE-2019-20093 has a severity rating that indicates it can lead to a denial of service due to a NULL pointer dereference.
How do I fix CVE-2019-20093?
To fix CVE-2019-20093, update to the latest version of PoDoFo or apply the specific patches provided by the software maintainers.
What software is affected by CVE-2019-20093?
CVE-2019-20093 affects PoDoFo version 0.9.6 and Fedora versions 30 and 31.
What type of attack does CVE-2019-20093 enable?
CVE-2019-20093 enables remote attackers to cause a denial of service condition.
What component is involved in CVE-2019-20093 vulnerability?
The vulnerability in CVE-2019-20093 is located in the PoDoFo::PdfVariant::DelayedLoad function within the PdfVariant.h file.