PT-2017-12596 · Qpdf+3 · Qpdf+3

Jay Berkenbilt · Publicado 2017-08-27 · Atualizado 2024-06-15 · CVE-2017-12595

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QPDF versions 6.0.0 through 7.0.b1

Description The issue is related to the tokenizer in QPDF, which is recursive for arrays and dictionaries. This allows remote attackers to cause a denial of service, resulting in stack consumption and a segmentation fault, or possibly have other unspecified impacts. The attack can be carried out via a PDF document with a deep data structure.

Recommendations For QPDF versions 6.0.0 through 7.0.b1, consider restricting the parsing of deeply nested PDF structures to prevent potential denial of service attacks until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2017-2228

CVE-2017-12595

MGASA-2018-0145

OPENSUSE-SU-2024:11289-1

SUSE-SU-2018:3066-1

SUSE-SU-2018:3066-2

USN-3638-1

Produtos afetados

Alt Linux

Qpdf

Suse

Ubuntu

Referências · 53

• https://github.com/qpdf/qpdf/commit/ad527a64f93dca12f6aabab2ca99ae5eb352ab4b · Correção
• https://github.com/qpdf/qpdf/issues/146 · Correção
• https://ubuntu.com/security/CVE-2017-12595 · Aviso do Fabricante
• https://lists.opensuse.org/opensuse-updates/2018-02/msg00056.html · Nota
• https://ubuntu.com/security/CVE-2017-9208 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-11625 · Aviso do Fabricante
• https://security.alpinelinux.org/vuln/CVE-2017-12595 · Nota
• https://bugzilla.suse.com/1040313 · Nota
• https://osv.dev/vulnerability/ALPINE-CVE-2017-12595 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2018:3066-2 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-11627 · Nota
• https://osv.dev/vulnerability/USN-3638-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-9209 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-11626 · Nota
• https://bugzilla.suse.com/1040312 · Nota