Published: 25/07/2017 Updated: 03/10/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows malicious users to cause a denial of service via a crafted file, related to the QPDFTokenizer::resolveLiteral function in QPDFTokenizer.cc after four consecutive calls to QPDFObjectHandle::parseInternal, aka an "infinite loop."

Vulnerable Product	Search on Vulmon	Subscribe to Product
qpdf project qpdf 6.0.0

Several security issues were fixed in QPDF ...

Debian Bug report logs - #863390 qpdf: CVE-2017-9208 CVE-2017-9209 CVE-2017-9210 Package: src:qpdf; Maintainer for src:qpdf is Jay Berkenbilt <qjb@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 26 May 2017 05:00:02 UTC Severity: important Tags: fixed-upstream, security, upstream Found ...

Debian Bug report logs - #871320 qpdf: CVE-2017-11624 CVE-2017-11625 CVE-2017-11626 CVE-2017-11627 Package: src:qpdf; Maintainer for src:qpdf is Jay Berkenbilt <qjb@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 7 Aug 2017 15:45:04 UTC Severity: important Tags: fixed-upstream, security ...

A stack-consumption vulnerability was found in libqpdf in QPDF 600, which allows attackers to cause a denial of service via a crafted file, related to the QPDFTokenizer::resolveLiteral function in QPDFTokenizercc after four consecutive calls to QPDFObjectHandle::parseInternal, aka an "infinite loop" ...

CWE-835 https://github.com/qpdf/qpdf/issues/119 http://somevulnsofadlab.blogspot.jp/2017/07/qpdfan-infinite-loop-in-libqpdf_65.html https://usn.ubuntu.com/3638-1/https://usn.ubuntu.com/3638-1/https://nvd.nist.gov

CVE-2017-11626

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect