PT-2018-9527 · Kde+5 · Okular+5

Joran Herve · Published 2018-09-06 · Updated 2024-06-15 · CVE-2018-1000801

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions okular versions prior to 18.08.1

Description The issue is related to a Directory Traversal vulnerability in the unpackDocumentArchive(...) function located in core/document.cpp. This can lead to Arbitrary file creation on the user workstation. The attack is exploitable when the victim opens a specially crafted Okular archive.

Recommendations For okular versions prior to 18.08.1, update to version 18.08.1 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the unpackDocumentArchive(...) function until a patch is available. Restrict access to specially crafted Okular archives to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

ALT-PU-2019-1289

CESA-2020_1173

CVE-2018-1000801

DLA-1516-1

DSA-4303-1

MGASA-2018-0389

OPENSUSE-SU-2018_2733-1

OPENSUSE-SU-2024:11110-1

RHSA-2020:1173

RHSA-2020_1173

USN-4830-1

Affected Products

Alt Linux

Centos

Okular

Red Hat

Suse

Ubuntu

References · 40

• 🔥 https://bugs.kde.org/show_bug.cgi?id=398096 · Exploit
• https://osv.dev/vulnerability/CVE-2018-1000801 · Vendor Advisory
• https://cgit.kde.org/okular.git/commit/?id=8ff7abc14d41906ad978b6bc67e69693863b9d47 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-1000801 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2018-0389 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000801 · Security Note
• https://osv.dev/vulnerability/DLA-1516-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DLA-1516-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DSA-4303-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000801 · Security Note
• https://cve.org/CVERecord?id=CVE-2018-1000801 · Security Note
• https://ubuntu.com/security/CVE-2018-1000801 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-1000801 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-1000801 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/okular · Vendor Advisory