Fedora Update for mingw-podofo FEDORA-2018-2807317e7a

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 27 : mingw-podofo (2018-2807317e7a)

Backport security fixes for: CVE-2017-7380, CVE-2017-7381, CVE-2017-7382, CVE-2017-7383, CVE-2017-5852, CVE-2017-5853, CVE-2017-6844, CVE-2017-5854, CVE-2017-5855, CVE-2017-5886, CVE-2018-8000, CVE-2017-6840, CVE-2017-6842, CVE-2017-6843, CVE-2017-6845, CVE-2017-6847, CVE-2017-6848, CVE-2017-7378...

Fedora Update for podofo FEDORA-2018-2f3c0cdf93

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sql injection

An issue was discovered in PoDoFo 0.9.5. There is an Excessive Recursion in the PdfPagesTree::GetPageNode function of PdfPagesTree.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file, a related issue to CVE-2017-8054...

CVE-2018-11254

An issue was discovered in PoDoFo 0.9.5. There is an Excessive Recursion in the PdfPagesTree::GetPageNode function of PdfPagesTree.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file, a related issue to CVE-2017-8054...

CVE-2016-8054

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2014-8054

CVE-2014-8054 is rejected and does not represent an active vulnerability entry.

CVE-2016-8054

...

CVE-2014-8054

...

CVE-2017-8054

The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service infinite recursion and application crash via a crafted PDF document...

CVE-2017-8054

CVE-2017-8054 affects PoDoFo up to version 0.9.6 (PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464) and can be exploited by a crafted PDF to cause a denial of service via infinite recursion or crash. Multiple advisories (SUSE/openSUSE, SUSE-SU updates, and related Nessus entries) fix thi...