CVEvulnerability
CVE-2018-13988
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-07-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-125
Description
Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by pdfunite. This can result in memory corruption and denial of service. This may be exploitable when a victim opens a specially crafted PDF file.
Affected configurations
• freedesktop poppler (<= 0.62.0)
• canonical ubuntu linux 14.04
• canonical ubuntu linux 16.04
• canonical ubuntu linux 18.04
• debian debian linux 8.0
• redhat ansible tower 3.3.0
• redhat openshift container platform 3.11
• redhat enterprise linux desktop 7.0
• redhat enterprise linux server 7.0
• redhat enterprise linux workstation 7.0
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- http://packetstormsecurity.com/files/148661/PDFunite-0.62.0-Buffer-Overflow.html Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHBA-2019:0327 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3140 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3505 Third Party Advisory
- https://bugzilla.novell.com/show_bug.cgi?id=CVE-2018-13988 Issue Tracking, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1602838 Issue Tracking, Third Party Advisory
- https://cgit.freedesktop.org/poppler/poppler/commit/?id=004e3c10df0abda214f0c293f9e269fdd979c5ee Patch, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2018/10/msg00024.html Mailing List, Third Party Advisory
- https://usn.ubuntu.com/3757-1/ Third Party Advisory
- http://packetstormsecurity.com/files/148661/PDFunite-0.62.0-Buffer-Overflow.html Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHBA-2019:0327 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3140 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3505 Third Party Advisory
- https://bugzilla.novell.com/show_bug.cgi?id=CVE-2018-13988 Issue Tracking, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1602838 Issue Tracking, Third Party Advisory
- https://cgit.freedesktop.org/poppler/poppler/commit/?id=004e3c10df0abda214f0c293f9e269fdd979c5ee Patch, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2018/10/msg00024.html Mailing List, Third Party Advisory
- https://usn.ubuntu.com/3757-1/ Third Party Advisory