Lucene search

GoogleOSV:CVE-2017-18184

HistoryFeb 13, 2018 - 7:29 p.m.

CVE-2017-18184

2018-02-1319:29:00

Google

osv.dev

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

44.2%

JSON

An issue was discovered in QPDF before 7.0.0. There is a stack-based out-of-bounds read in the function iterate_rc4 in QPDF_encryption.cc.

CPENameOperatorVersion
qpdfeqrelease-qpdf-5.0.0
qpdfeqrelease-qpdf-2.3.1
qpdfeqrelease-qpdf-4.2.0
qpdfeqrelease-qpdf-5.1.0
qpdfeqrelease-qpdf-2.3.0
qpdfeqrelease-qpdf-2.0.5
qpdfeqrelease-qpdf-7.0.b1
qpdfeqrelease-qpdf-3.0.2
qpdfeqrelease-qpdf-3.0.1
qpdfeqrelease-qpdf-2.2.rc1

Name	Operator	Version
qpdf	eq	release-qpdf-5.0.0
qpdf	eq	release-qpdf-2.3.1
qpdf	eq	release-qpdf-4.2.0
qpdf	eq	release-qpdf-5.1.0
qpdf	eq	release-qpdf-2.3.0
qpdf	eq	release-qpdf-2.0.5
qpdf	eq	release-qpdf-7.0.b1
qpdf	eq	release-qpdf-3.0.2
qpdf	eq	release-qpdf-3.0.1
qpdf	eq	release-qpdf-2.2.rc1

Rows per page:

1-10 of 391

References

github.com/qpdf/qpdf/commit/dea704f0ab7f625e1e7b3f9a1110b45b63157317

github.com/qpdf/qpdf/issues/147

usn.ubuntu.com/3638-1/

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

44.2%

JSON

Related for OSV:CVE-2017-18184