QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2018-10768

Back to search

CVE-2018-10768

Published: May 6, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5. A crafted input will lead to a remote denial of service attack. Later Ubuntu packages such as for Poppler 0.41.0 are not affected.

VendorProductVersions

n/a

n/a

affected
n/a

References

RHSA-2018:3505
vendor-advisory
x_refsource_REDHAT
USN-3647-1
vendor-advisory
x_refsource_UBUNTU
RHSA-2018:3140
vendor-advisory
x_refsource_REDHAT
RHBA-2019:0327
vendor-advisory
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now