CVE-2018-7174

An issue was discovered in xpdf 4.00. An infinite loop in XRef::Xref allows an attacker to cause denial of service because loop detection exists only for tables, not streams...

CVE-2018-7173

A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of service via a specific file due to inappropriate decoding...

DEBIAN-CVE-2018-7173

A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of service via a specific file due to inappropriate decoding...

CVE-2018-7175

An issue was discovered in xpdf 4.00. A NULL pointer dereference in readCodestream allows an attacker to cause denial of service via a JPX image with zero components...

DEBIAN-CVE-2018-7174

An issue was discovered in xpdf 4.00. An infinite loop in XRef::Xref allows an attacker to cause denial of service because loop detection exists only for tables, not streams...

CVE-2018-7175

An issue was discovered in xpdf 4.00. A NULL pointer dereference in readCodestream allows an attacker to cause denial of service via a JPX image with zero components...

CVE-2018-7175

CV E-2018-7175 affects xpdf 4.00. A NULL pointer dereference in readCodestream handling JPX images with zero components can cause denial of service. Public references in connected docs indicate remediation: update to xpdf 4.01 (Fedora 29, Fedora/Thanks to Nessus entries). The vulnerability is tie...

CVE-2018-7173

A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of service via a specific file due to inappropriate decoding...

CVE-2018-7174

An issue was discovered in xpdf 4.00. An infinite loop in XRef::Xref allows an attacker to cause denial of service because loop detection exists only for tables, not streams...

CVE-2018-7173

CVE-2018-7173 affects xpdf 4.00. A large loop in JBIG2Stream::readSymbolDictSeg can be exploited by a crafted PDF/file to trigger a denial of service. The description and connected sources consistently describe DoS via inappropriate decoding in JBIG2Stream::readSymbolDictSeg; no patch/version det...

CVE-2018-7174

CVE-2018-7174 concerns xpdf 4.00 where an infinite loop in XRef::Xref can trigger denial of service. The loop detection exists only for tables, not streams, enabling potential resource exhaustion. Multiple connected sources (OSV, Debian/Ubuntu/Nessus/OSV entries, SUSE, OpenVAS, Fedora updates) co...

CVE-2018-7174

An issue was discovered in xpdf 4.00. An infinite loop in XRef::Xref allows an attacker to cause denial of service because loop detection exists only for tables, not streams...

CVE-2018-7173

A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of service via a specific file due to inappropriate decoding...

CVE-2018-7175

An issue was discovered in xpdf 4.00. A NULL pointer dereference in readCodestream allows an attacker to cause denial of service via a JPX image with zero components...

CVE-2018-7174

An issue was discovered in xpdf 4.00. An infinite loop in XRef::Xref allows an attacker to cause denial of service because loop detection exists only for tables, not streams...

CVE-2018-7175

An issue was discovered in xpdf 4.00. A NULL pointer dereference in readCodestream allows an attacker to cause denial of service via a JPX image with zero components...

CVE-2018-7173

A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of service via a specific file due to inappropriate decoding...

PT-2018-17931

Name of the Vulnerable Software and Affected Versions xpdf version 4.00 Description An issue was discovered that allows an attacker to cause denial of service via a JPX image with zero components, due to a NULL pointer dereference in the readCodestream function. Recommendations For xpdf version...

PT-2018-17930

Name of the Vulnerable Software and Affected Versions xpdf version 4.00 Description An issue in xpdf allows an attacker to cause denial of service due to an infinite loop in XRef::Xref. This occurs because loop detection exists only for tables, not streams. Recommendations For xpdf version 4.00, ...

PT-2018-17929

Name of the Vulnerable Software and Affected Versions xpdf version 4.00 Description The issue allows an attacker to cause denial of service via a specific file due to inappropriate decoding in the JBIG2Stream::readSymbolDictSeg function. Recommendations For xpdf version 4.00, consider updating to...