6.8
CVSSv2

CVE-2018-5308

Published: 09/01/2018 Updated: 29/01/2018
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 606
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function (base/PdfOutputStream.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.

Vulnerable Product Search on Vulmon Subscribe to Product

podofo project podofo 0.9.5

Vendor Advisories

Debian Bug report logs - #854602 libpodofo: CVE-2017-5854/CVE-2018-5308 - NULL pointer dereference in PdfOutputStreamcpp Package: libpodofo; Maintainer for libpodofo is Mattia Rizzolo <mattia@debianorg>; Reported by: Guido Günther <agx@sigxcpuorg> Date: Sat, 4 Feb 2017 10:51:02 UTC Severity: important Tags: fixe ...
Debian Bug report logs - #889511 libpodofo: CVE-2018-5295 Package: src:libpodofo; Maintainer for src:libpodofo is Mattia Rizzolo <mattia@debianorg>; Reported by: Matthias Brinke <podofo-sec-contrib@mailboxorg> Date: Sun, 4 Feb 2018 00:27:07 UTC Severity: important Tags: fixed-upstream, patch, security, upstream F ...
Debian Bug report logs - #860995 libpodofo: CVE-2017-8054 Package: src:libpodofo; Maintainer for src:libpodofo is Mattia Rizzolo <mattia@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 23 Apr 2017 11:33:05 UTC Severity: important Tags: patch, security, upstream Found in version libpodof ...
Debian Bug report logs - #861562 libpodofo: CVE-2017-6845 Package: src:libpodofo; Maintainer for src:libpodofo is Mattia Rizzolo <mattia@debianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Thu, 2 Mar 2017 18:33:01 UTC Severity: important Tags: fixed-upstream, security, upstream Fixed in version libp ...
Debian Bug report logs - #861597 libpodofo: CVE-2017-8378 Package: src:libpodofo; Maintainer for src:libpodofo is Mattia Rizzolo <mattia@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 1 May 2017 09:27:02 UTC Severity: important Tags: fixed-upstream, security, upstream Found in version ...
PoDoFo 095 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function (base/PdfOutputStreamcpp) Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file ...