USN-3638-1: QPDF vulnerabilities
It was discovered that QPDF incorrectly handled certain malformed files. A remote attacker could use this issue to cause QPDF to crash, resulting in a denial of service, or possibly execute arbitrary code.
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-3638-1?
USN-3638-1 has a severity rating that indicates it can cause denial of service or potential arbitrary code execution.
How do I fix USN-3638-1?
To fix USN-3638-1, upgrade to the updated package versions 8.0.2-3~17.10.1, 8.0.2-3~16.04.1, or 8.0.2-3~14.04.1 for libqpdf21 and qpdf.
Are all versions of Ubuntu affected by USN-3638-1?
No, only specific versions of Ubuntu, including 14.04, 16.04, and 17.10, with the affected packages are vulnerable to USN-3638-1.
What is the potential impact of USN-3638-1?
The potential impact of USN-3638-1 includes application crashes leading to a denial of service and the possibility of arbitrary code execution.
Which packages are affected by USN-3638-1?
The affected packages in USN-3638-1 are libqpdf21 and qpdf in the specified Ubuntu versions.