Lucene search
Gentoo FoundationMGASA-2024-0076HistoryMar 20, 2024 - 6:35 a.m.
Updated qpdf packages fix security vulnerability
2024-03-2006:35:18
Gentoo Foundation
advisories.mageia.org
17
qpdf
security vulnerability
fix
heap buffer overflow
std::shared_count
cve-2024-24246
unix
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
6.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
10.4%
Heap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via the std::__shared_count() function at /bits/shared_ptr_base.h. (CVE-2024-24246)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 9 | noarch | qpdf | < 11.9.0-1 | qpdf-11.9.0-1.mga9 |
Related
openvas
openvas
Fedora: Security Advisory for qpdf (FEDORA-2024-8762164e47)
2024-03-11 00:00:00
Ubuntu: Security Advisory (USN-6713-1)
2024-03-26 00:00:00
Fedora: Security Advisory for qpdf (FEDORA-2024-daa7df59d6)
2024-03-11 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: qpdf-11.6.4-2.fc39
2024-03-10 01:07:35
[SECURITY] Fedora 40 Update: qpdf-11.9.0-1.fc40
2024-03-23 00:45:46
[SECURITY] Fedora 38 Update: qpdf-11.6.4-2.fc38
2024-03-10 01:23:37
osv
osv
qpdf vulnerability
2024-03-25 12:01:37
CVE-2024-24246
2024-02-29 20:15:41
nessus
nessus
Fedora 38 : qpdf (2024-daa7df59d6)
2024-03-10 00:00:00
Fedora 39 : qpdf (2024-8762164e47)
2024-03-10 00:00:00
Fedora 40 : qpdf (2024-7d55be81bd)
2024-04-29 00:00:00
ubuntucve
ubuntucve
CVE-2024-24246
2024-02-29 00:00:00
veracode
veracode
Buffer Overflow
2024-03-06 04:34:03
prion
prion
Heap overflow
2024-02-29 20:15:00
alpinelinux
alpinelinux
CVE-2024-24246
2024-02-29 20:15:41
cve
cve
CVE-2024-24246
2024-02-29 20:15:41
debiancve
debiancve
CVE-2024-24246
2024-02-29 20:15:41
redhatcve
redhatcve
CVE-2024-24246
2024-03-01 06:04:06
ubuntu
ubuntu
QPDF vulnerability
2024-03-25 00:00:00
cvelist
cvelist
CVE-2024-24246
2024-02-29 00:00:00
nvd
nvd
CVE-2024-24246
2024-02-29 20:15:41
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
6.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
10.4%
Related for MGASA-2024-0076