CVE-2018-5783 — Allocation of Resources Without Limits or Throttling in Project Podofo

CWE-770 — Allocation of Resources Without Limits or Throttling7 documents5 sources

Severity

5.5MEDIUMNVD

EPSS

0.4%

top 42.46%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Debian Libpodofo Podofo Project Podofo

Timeline

PublishedJan 19

Latest updateMay 13

Description

In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PoDoFo::PdfVecObjects::Reserve function (base/PdfVecObjects.h). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶debiandebian/libpodofo< libpodofo 0.9.6+dfsg-4 (bookworm)

▶NVDpodofo_project/podofo0.9.5

🔴Vulnerability Details

GHSA

GHSA-mxpf-9v3v-24p5: In PoDoFo 0↗2022-05-13

▶

OSV

CVE-2018-5783: In PoDoFo 0↗2018-01-19

▶

📋Vendor Advisories

Debian

CVE-2018-5783: libpodofo - In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PoDoFo::PdfVe...↗2018

▶

💬Community

Bugzilla

CVE-2018-5783 podofo: uncontrolled memory allocation in the PoDoFo::PdfVecObjects::Reserve function in base/PdfVecObjects.h [fedora-all]↗2018-01-23

▶

Bugzilla

CVE-2018-5783 podofo: uncontrolled memory allocation in the PoDoFo::PdfVecObjects::Reserve function in base/PdfVecObjects.h [epel-all]↗2018-01-23

▶

Bugzilla

CVE-2018-5783 podofo: uncontrolled memory allocation in the PoDoFo::PdfVecObjects::Reserve function in base/PdfVecObjects.h↗2018-01-23

▶