Multiple vulnerabilities were published for podofo. CVE-2017-7994: The function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo allows attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document. CVE-2017-8053: PoDoFo allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (PdfParser.cpp). CVE-2017-8054: The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo allows attackers to cause a denial of service (infinite recursion and application crash) via a crafted PDF document.
Created podofo tracking bugs for this issue: Affects: fedora-all [bug 1438436] Affects: epel-all [bug 1438434]
CVE-2017-8378: Heap-based buffer overflow in the PdfParser::ReadObjects function in base/PdfParser.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors related to m_offsets.size. References: https://github.com/xiangxiaobo/poc_and_report/tree/master/podofo_heapoverflow_PdfParser.ReadObjects
CVE-2017-8787: The PoDoFo::PdfXRefStreamParserObject::ReadXRefStreamEntry function in base/PdfXRefStreamParserObject.cpp:224 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted PDF file.
CVE-2018-5295: In PoDoFo 0.9.5, there is an integer overflow in the PdfXRefStreamParserObject::ParseStream function (base/PdfXRefStreamParserObject.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file. https://bugzilla.redhat.com/show_bug.cgi?id=1531897 CVE-2018-5296: In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PdfParser::ReadXRefSubsection function (base/PdfParser.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file. https://bugzilla.redhat.com/show_bug.cgi?id=1531956
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.