- Vulnerability/
- USN-3638-1
USN-3638-1: QPDF vulnerabilities
First published: Mon May 07 2018(Updated: )
It was discovered that QPDF incorrectly handled certain malformed files. A remote attacker could use this issue to cause QPDF to crash, resulting in a denial of service, or possibly execute arbitrary code.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/libqpdf21 | <8.0.2-3~17.10.1 | 8.0.2-3~17.10.1 |
| Ubuntu OpenSSH Client | =17.10 | |
| All of | ||
| ubuntu/qpdf | <8.0.2-3~17.10.1 | 8.0.2-3~17.10.1 |
| Ubuntu OpenSSH Client | =17.10 | |
| All of | ||
| ubuntu/libqpdf21 | <8.0.2-3~16.04.1 | 8.0.2-3~16.04.1 |
| Ubuntu OpenSSH Client | =16.04 | |
| All of | ||
| ubuntu/qpdf | <8.0.2-3~16.04.1 | 8.0.2-3~16.04.1 |
| Ubuntu OpenSSH Client | =16.04 | |
| All of | ||
| ubuntu/libqpdf21 | <8.0.2-3~14.04.1 | 8.0.2-3~14.04.1 |
| Ubuntu OpenSSH Client | =14.04 | |
| All of | ||
| ubuntu/qpdf | <8.0.2-3~14.04.1 | 8.0.2-3~14.04.1 |
| Ubuntu OpenSSH Client | =14.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2015-9252
- https://ubuntu.com/security/CVE-2017-11624
- https://ubuntu.com/security/CVE-2017-11625
- https://ubuntu.com/security/CVE-2017-11626
- https://ubuntu.com/security/CVE-2017-11627
- https://ubuntu.com/security/CVE-2017-12595
- https://ubuntu.com/security/CVE-2017-18183
- https://ubuntu.com/security/CVE-2017-18184
- https://ubuntu.com/security/CVE-2017-18185
- https://ubuntu.com/security/CVE-2017-18186
- https://ubuntu.com/security/CVE-2017-9208
- https://ubuntu.com/security/CVE-2017-9209
- https://ubuntu.com/security/CVE-2017-9210
- https://ubuntu.com/security/CVE-2018-9918
- https://launchpad.net/ubuntu/+source/qpdf/8.0.2-3~17.10.1
- https://launchpad.net/ubuntu/+source/qpdf/8.0.2-3~16.04.1
- https://launchpad.net/ubuntu/+source/qpdf/8.0.2-3~14.04.1
- https://ubuntu.com/security/notices/USN-3638-1 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the severity of USN-3638-1?
USN-3638-1 has a severity rating that indicates it can cause denial of service or potential arbitrary code execution.
How do I fix USN-3638-1?
To fix USN-3638-1, upgrade to the updated package versions 8.0.2-3~17.10.1, 8.0.2-3~16.04.1, or 8.0.2-3~14.04.1 for libqpdf21 and qpdf.
Are all versions of Ubuntu affected by USN-3638-1?
No, only specific versions of Ubuntu, including 14.04, 16.04, and 17.10, with the affected packages are vulnerable to USN-3638-1.
What is the potential impact of USN-3638-1?
The potential impact of USN-3638-1 includes application crashes leading to a denial of service and the possibility of arbitrary code execution.
Which packages are affected by USN-3638-1?
The affected packages in USN-3638-1 are libqpdf21 and qpdf in the specified Ubuntu versions.
- agent/severity
- agent/references
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/title
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu openssh client
- version/ubuntu openssh client/17.10
- version/ubuntu openssh client/16.04
- version/ubuntu openssh client/14.04