Unrated severityNVD Advisory· Published May 6, 2018· Updated Aug 5, 2024
CVE-2018-10768
CVE-2018-10768
Description
There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5. A crafted input will lead to a remote denial of service attack. Later Ubuntu packages such as for Poppler 0.41.0 are not affected.
Affected products
2- osv-coords2 versionspkg:rpm/suse/poppler&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4pkg:rpm/suse/poppler&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5
< 0.24.4-14.16.6+ 1 more
- (no CPE)range: < 0.24.4-14.16.6
- (no CPE)range: < 0.24.4-14.16.6
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- access.redhat.com/errata/RHBA-2019:0327mitrevendor-advisoryx_refsource_REDHAT
- access.redhat.com/errata/RHSA-2018:3140mitrevendor-advisoryx_refsource_REDHAT
- access.redhat.com/errata/RHSA-2018:3505mitrevendor-advisoryx_refsource_REDHAT
- usn.ubuntu.com/3647-1/mitrevendor-advisoryx_refsource_UBUNTU
- bugs.freedesktop.org/show_bug.cgimitrex_refsource_MISC
- lists.debian.org/debian-lts-announce/2018/10/msg00024.htmlmitremailing-listx_refsource_MLIST
News mentions
0No linked articles in our index yet.