PT-2018-3821 · Poppler+4 · Poppler+4

Published 2018-05-05 · Updated 2020-06-16 · CVE-2018-10768

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Poppler version 0.24.5

Description The issue is related to a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h. This can be exploited by a crafted input, leading to a remote denial of service attack. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations For Poppler version 0.24.5, consider updating to a later version such as Poppler 0.41.0, which is not affected by this issue. As a temporary workaround, consider restricting the use of the AnnotPath::getCoordsLength function in Annot.h to minimize the risk of exploitation.

Exploit

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2022-05816

CESA-2018_3140

CVE-2018-10768

DLA-1562-1

MGASA-2018-0290

RHSA-2018:3140

RHSA-2018_3140

SUSE-SU-2020:1626-1

SUSE-SU-2020_1626-1

USN-3647-1

Affected Products

Centos

Poppler

Red Hat

Suse

Ubuntu

References · 697

• 🔥 https://github.com/Metnew/uxss-db/tree/master/webkit/CVE-2018-4204 · Exploit
• 🔥 https://github.com/mwrlabs/CVE-2018-4121 · Exploit
• 🔥 https://github.com/FSecureLABS/CVE-2018-4121 · Exploit
• 🔥 https://bugs.freedesktop.org/show_bug.cgi?id=106408 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10767 · Security Note
• https://usn.ubuntu.com/3647-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-13988 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2018-10768 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9381 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11712 · Security Note
• https://cve.org/CVERecord?id=CVE-2018-10768 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-10768 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2862 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2020:1626-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3647-1 · Vendor Advisory