CVE-2018-11255
libpodofo0.9.5: An issue was discovered in PoDoFo 0.9.5
CVE-2018-11255 is fixed in 4 products on 1 platform, first by libpodofo-utils 0.9.5-9ubuntu0.1~esm1, released April 3, 2019. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0108
65th percentile
An issue was discovered in PoDoFo 0.9.5. The function PdfPage::GetPageNumber() in PdfPage.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libpodofo-utils · Ubuntu 18.04.6 LTS (bionic) | 0.9.5-9ubuntu0.1~esm1 | libpodofo-utils 0.9.5-9ubuntu0.1~esm1 | Apr 3, 2019 |
| libpodofo-utils · Ubuntu 20.04 LTS (focal) | 0.9.6+dfsg-5ubuntu0.1~esm1 | libpodofo-utils 0.9.6+dfsg-5ubuntu0.1~esm1 | Aug 25, 2021 |
| libpodofo-utils · Ubuntu 22.04.1 LTS (jammy) | 0.9.7+dfsg-3ubuntu0.1~esm1 | libpodofo-utils 0.9.7+dfsg-3ubuntu0.1~esm1 | Aug 25, 2021 |
| libpodofo0.9.5 · Ubuntu 18.04.6 LTS (bionic) | 0.9.5-9ubuntu0.1~esm1 | libpodofo0.9.5 0.9.5-9ubuntu0.1~esm1 | Apr 3, 2019 |
| libpodofo0.9.6 · Ubuntu 20.04 LTS (focal) | 0.9.6+dfsg-5ubuntu0.1~esm1 | libpodofo0.9.6 0.9.6+dfsg-5ubuntu0.1~esm1 | Aug 25, 2021 |
| libpodofo0.9.7 · Ubuntu 22.04.1 LTS (jammy) | 0.9.7+dfsg-3ubuntu0.1~esm1 | libpodofo0.9.7 0.9.7+dfsg-3ubuntu0.1~esm1 | Aug 25, 2021 |