Linux Distros Unpatched Vulnerability : CVE-2017-18185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in QPDF before 7.0.0. There is a large heap-based out-of-bounds read in the PlBuffer::write function in PlBuffer.cc. It is caused by an...

CVE-2017-18185

An integer overflow flaw leading to heap-based out-of-bounds read was found in the way QPDF parsed PDF files. An attacker could potentially use this flaw to crash QPDF by tricking it into processing crafted QPDF files...

CVE-2017-18185

CVE-2017-18185 affects QPDF before 7.0.0. The issue is a large heap-based out-of-bounds read in Pl_Buffer::write, caused by an integer overflow in the PNG filter. Several connected advisories/documentation (e.g., SUSE, Red Hat, Ubuntu, NVD) corroborate the vulnerability and reference a qpdf commi...