Lucene search

K
mageiaGentoo FoundationMGASA-2018-0232
HistoryMay 12, 2018 - 10:57 a.m.

Updated qpdf packages fix security vulnerability

2018-05-1210:57:59
Gentoo Foundation
advisories.mageia.org
10

0.005 Low

EPSS

Percentile

76.3%

A flaw was found in QPDF through 8.0.2. libqpdf.a mishandles certain ‘expected dictionary key but found non-name object’ cases, allowing remote attackers to cause a denial of service (stack exhaustion), related to the QPDFObjectHandle and QPDF_Dictionary classes (CVE-2018-9918).

OSVersionArchitecturePackageVersionFilename
Mageia5noarchqpdf< 7.1.1-1.1qpdf-7.1.1-1.1.mga5
Mageia6noarchqpdf< 7.1.1-1.1qpdf-7.1.1-1.1.mga6