Huawei EulerOS: Security Advisory for qpdf (EulerOS-SA-2019-2655)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for qpdf (EulerOS-SA-2019-2465)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : qpdf (EulerOS-SA-2020-1030)

According to the version of the qpdf package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In QPDF 8.2.1, in libqpdf/QPDFWriter.cc, QPDFWriter::unparseObject and QPDFWriter::unparseChild have recursive calls for a long time, which allows...

EulerOS 2.0 SP3 : qpdf (EulerOS-SA-2019-2655)

According to the versions of the qpdf package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral in QPDFTokenizer.cc, relat...

EulerOS 2.0 SP2 : qpdf (EulerOS-SA-2019-2465)

According to the version of the qpdf package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral in QPDFTokenizer.cc, related ...

EulerOS 2.0 SP5 : qpdf (EulerOS-SA-2019-2185)

According to the version of the qpdf package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral in QPDFTokenizer.cc, related ...

ALBA-2019:3507 qpdf bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

qpdf bug fix and enhancement update

An update is available for qpdf. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.1...

qpdf bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

qpdf:qpdf_fuzzer: Use-of-uninitialized-value in deflate_slow

Project: https://github.com/qpdf/qpdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5667600474570752 Project: qpdf Fuzzing Engine: libFuzzer Fuzz Target: qpdffuzzer Job Type: libfuzzermsanqpdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: deflatesl...

qpdf:dct_fuzzer: Use-of-uninitialized-value in ycck_cmyk_convert

Project: https://github.com/qpdf/qpdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5646580451639296 Project: qpdf Fuzzing Engine: libFuzzer Fuzz Target: dctfuzzer Job Type: libfuzzermsanqpdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

qpdf:qpdf_fuzzer: Use-of-uninitialized-value in QPDFWriter::unparseObject

Project: https://github.com/qpdf/qpdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5635403973656576 Project: qpdf Fuzzing Engine: libFuzzer Fuzz Target: qpdffuzzer Job Type: libfuzzermsanqpdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

qpdf/dct_fuzzer: Use-of-uninitialized-value in ycck_cmyk_convert

Project: https://github.com/qpdf/qpdf.git Detailed report: https://oss-fuzz.com/testcase?key=5632990870241280 Project: qpdf Fuzzer: libFuzzerqpdfdctfuzzer Fuzz target binary: dctfuzzer Job Type: libfuzzermsanqpdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State...

qpdf/qpdf_fuzzer: Use-of-uninitialized-value in deflate_slow

Project: https://github.com/qpdf/qpdf.git Detailed report: https://oss-fuzz.com/testcase?key=5710136049401856 Project: qpdf Fuzzer: libFuzzerqpdffuzzer Fuzz target binary: qpdffuzzer Job Type: libfuzzermsanqpdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

qpdf/qpdf_fuzzer: Use-of-uninitialized-value in QPDFWriter::unparseObject

Project: https://github.com/qpdf/qpdf.git Detailed report: https://oss-fuzz.com/testcase?key=5706648812781568 Project: qpdf Fuzzer: libFuzzerqpdffuzzer Fuzz target binary: qpdffuzzer Job Type: libfuzzermsanqpdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

Zydra - File Password Recovery Tool And Linux Shadow File Cracker

Zydra is a file password recovery tool and Linux shadow file cracker. It uses the dictionary search or Brute force method for cracking passwords. Supported Files RAR Files Legacy ZIP Files PDF Files Linux Shadow Files zydra can find all the user’s password in the linux shadow file one after the...

Fedora 28 : qpdf (2018-b4ef545db5)

Security fix for CVE-2018-9918 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

CVE-2018-18020

In QPDF 8.2.1, in libqpdf/QPDFWriter.cc, QPDFWriter::unparseObject and QPDFWriter::unparseChild have recursive calls for a long time, which allows remote attackers to cause a denial of service via a crafted PDF file...

SUSE SLES12 Security Update : qpdf (SUSE-SU-2018:3066-2)

This update for qpdf fixes the following issues : qpdf was updated to 7.1.1. Security issues fixed : CVE-2017-11627: A stack-consumption vulnerability which allows attackers to cause DoS bsc1050577. CVE-2017-11625: A stack-consumption vulnerability which allows attackers to cause DoS bsc1050579...

SUSE-SU-2018:3066-2 Security update for qpdf

This update for qpdf fixes the following issues: qpdf was updated to 7.1.1. Security issues fixed: - CVE-2017-11627: A stack-consumption vulnerability which allows attackers to cause DoS bsc1050577. - CVE-2017-11625: A stack-consumption vulnerability which allows attackers to cause DoS bsc1050579...