PT-2020-22597

Name of the Vulnerable Software and Affected Versions QPDF affected versions not specified Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the QPDFTokenizer class, specifically in the isSpace, presentCharacter, and readToken functions...

qpdf:qpdf_fuzzer: Use-of-uninitialized-value in read_markers

Detailed Report: https://oss-fuzz.com/testcase?key=5709068089163776 Project: qpdf Fuzzing Engine: libFuzzer Fuzz Target: qpdffuzzer Job Type: libfuzzermsanqpdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: readmarkers consumemarkers jpegconsumeinput...

qpdf:qpdf_fuzzer: Use-of-uninitialized-value in QPDFTokenizer::isSpace

Detailed Report: https://oss-fuzz.com/testcase?key=5684680336867328 Project: qpdf Fuzzing Engine: libFuzzer Fuzz Target: qpdffuzzer Job Type: libfuzzermsanqpdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: QPDFTokenizer::isSpace...

Huawei EulerOS: Security Advisory for qpdf (EulerOS-SA-2019-2465)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for qpdf (EulerOS-SA-2020-1030)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for qpdf (EulerOS-SA-2019-2655)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for qpdf (EulerOS-SA-2019-2185)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : qpdf (EulerOS-SA-2020-1030)

According to the version of the qpdf package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In QPDF 8.2.1, in libqpdf/QPDFWriter.cc, QPDFWriter::unparseObject and QPDFWriter::unparseChild have recursive calls for a long time, which allows...

EulerOS 2.0 SP3 : qpdf (EulerOS-SA-2019-2655)

According to the versions of the qpdf package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral in QPDFTokenizer.cc, relat...

EulerOS 2.0 SP2 : qpdf (EulerOS-SA-2019-2465)

According to the version of the qpdf package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral in QPDFTokenizer.cc, related ...

EulerOS 2.0 SP5 : qpdf (EulerOS-SA-2019-2185)

According to the version of the qpdf package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral in QPDFTokenizer.cc, related ...

qpdf bug fix and enhancement update

An update is available for qpdf. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.1...

qpdf bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

ALBA-2019:3507 qpdf bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

qpdf:qpdf_fuzzer: Use-of-uninitialized-value in deflate_slow

Detailed Report: https://oss-fuzz.com/testcase?key=5667600474570752 Project: qpdf Fuzzing Engine: libFuzzer Fuzz Target: qpdffuzzer Job Type: libfuzzermsanqpdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: deflateslow deflate PlFlate::handleData Sanitizer:...

qpdf:dct_fuzzer: Use-of-uninitialized-value in ycck_cmyk_convert

Detailed Report: https://oss-fuzz.com/testcase?key=5646580451639296 Project: qpdf Fuzzing Engine: libFuzzer Fuzz Target: dctfuzzer Job Type: libfuzzermsanqpdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ycckcmykconvert sepupsample processdatasimplemain...

qpdf:qpdf_fuzzer: Use-of-uninitialized-value in QPDFWriter::unparseObject

Detailed Report: https://oss-fuzz.com/testcase?key=5635403973656576 Project: qpdf Fuzzing Engine: libFuzzer Fuzz Target: qpdffuzzer Job Type: libfuzzermsanqpdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: QPDFWriter::unparseObject QPDFWriter::writeObject...

qpdf/dct_fuzzer: Use-of-uninitialized-value in ycck_cmyk_convert

Detailed report: https://oss-fuzz.com/testcase?key=5632990870241280 Project: qpdf Fuzzer: libFuzzerqpdfdctfuzzer Fuzz target binary: dctfuzzer Job Type: libfuzzermsanqpdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ycckcmykconvert sepupsample...

qpdf/qpdf_fuzzer: Use-of-uninitialized-value in deflate_slow

Detailed report: https://oss-fuzz.com/testcase?key=5710136049401856 Project: qpdf Fuzzer: libFuzzerqpdffuzzer Fuzz target binary: qpdffuzzer Job Type: libfuzzermsanqpdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: deflateslow deflate PlFlate::handleData...

qpdf/qpdf_fuzzer: Use-of-uninitialized-value in QPDFWriter::unparseObject

Detailed report: https://oss-fuzz.com/testcase?key=5706648812781568 Project: qpdf Fuzzer: libFuzzerqpdffuzzer Fuzz target binary: qpdffuzzer Job Type: libfuzzermsanqpdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: QPDFWriter::unparseObject...