openSUSE 15 Security Update : podofo (SUSE-SU-2022:1316-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:1316-1 advisory. - The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service NULL pointer dereference...

openSUSE 15 Security Update : podofo (SUSE-SU-2022:3833-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:3833-1 advisory. - CVE-2018-12983: Fixed a stack overrun bsc1099719. Tenable has extracted the preceding description block directly from the SUSE security advisory. Note that...

SUSE-SU-2022:3833-1 Security update for podofo

This update for podofo fixes the following issues: - CVE-2018-12983: Fixed a stack overrun bsc1099719...

SUSE SLED12 / SLES12 Security Update : podofo (SUSE-SU-2022:3385-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3385-1 advisory. - CVE-2018-12983: Fixed a stack overrun bsc1099719. Tenable has extracted the preceding description block directly from...

SUSE-SU-2022:3385-1 Security update for podofo

This update for podofo fixes the following issues: - CVE-2018-12983: Fixed a stack overrun bsc1099719...

CVE-2018-12982

Invalid memory read in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6-rc1 allows remote attackers to have denial-of-service impact via a crafted file...

CVE-2019-9199

PoDoFo::Impose::PdfTranslator::setSource in pdftranslator.cpp in PoDoFo 0.9.6 has a NULL pointer dereference that can for example be triggered by sending a crafted PDF file to the podofoimpose binary. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified...

CVE-2021-30471

A flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call in PdfNamesTree::AddToDictionary function in src/podofo/doc/PdfNamesTree.cpp can lead to a stack overflow...

CVE-2018-20797

An issue was discovered in PoDoFo 0.9.6. There is an attempted excessive memory allocation in PoDoFo::podofocalloc in base/PdfMemoryManagement.cpp when called from PoDoFo::PdfPredictorDecoder::PdfPredictorDecoder in base/PdfFiltersPrivate.cpp...

CVE-2018-8000

In PoDoFo 0.9.5, there exists a heap-based buffer overflow vulnerability in PoDoFo::PdfTokenizer::GetNextToken in PdfTokenizer.cpp, a related issue to CVE-2017-5886. Remote attackers could leverage this vulnerability to cause a denial-of-service or potentially execute arbitrary code via a crafted...

SUSE SLED12 / SLES12 Security Update : podofo (SUSE-SU-2022:1690-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1690-1 advisory. - The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denia...

openSUSE: Security Advisory for podofo (SUSE-SU-2022:1316-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2022:1316-1 Security update for podofo

This update for podofo fixes the following issues: - CVE-2019-20093: Fixed an invalid memory access that could cause an application crash bsc1159921...

The vulnerability in the `src/base/PdfDictionary.cpp` component of the software library for working with PDF PoDoFo allows a perpetrator to cause a service failure.

The vulnerability in the src/base/PdfDictionary.cpp component of the PDF processing software library is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the IsNextToken function in the src/base/PdfToenizer.cpp component of the PDF processing software PoDoFo allows a malicious actor to access confidential data.

The vulnerability of the IsNextToken function in the src/base/PdfToenizer.cpp component of the PDF processing software library is related to the disclosure of information in the error-prone data area. Exploiting this vulnerability allows an attacker to gain access to confidential data remotely...

Fedora: Security Advisory for podofo (FEDORA-2022-6746739d52)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2020-0294)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2019-0044)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2018-0026)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PoDoFo Stack Buffer Overflow Vulnerability (CNVD-2021-93917)

PoDoFo is a free, portable and easy-to-use library for parsing, modifying and creating PDFs. version 0.9.6 of PoDoFo is vulnerable to a stack buffer overflow. An attacker can exploit this vulnerability via src/base/PdfDictionary.cpp:65 to cause a denial of service...