Test ID:	1.3.6.1.4.1.25623.1.0.856545
Category:	openSUSE Local Security Checks
Title:	openSUSE Security Advisory (SUSE-SU-2024:3550-1)
Summary:	The remote host is missing an update for the 'podofo' package(s) announced via the SUSE-SU-2024:3550-1 advisory.
Description:	Summary: The remote host is missing an update for the 'podofo' package(s) announced via the SUSE-SU-2024:3550-1 advisory. Vulnerability Insight: This update for podofo fixes the following issues: - CVE-2015-8981: Fixed heap overflow in the function ReadXRefSubsection (bsc#1023190) - CVE-2017-6840: Fixed invalid memory read in ColorChanger::GetColorFromStack (colorchanger.cpp) (bsc#1027787) - CVE-2017-6841: Fixed NULL pointer dereference in GraphicsStack::TGraphicsStackElement::~ TGraphicsStackElement (graphicsstack.h) (bsc#1027786) - CVE-2017-6842: Fixed NULL pointer dereference in ColorChanger::GetColorFromStack (colorchanger.cpp) (bsc#1027785) - CVE-2017-6845: Fixed NULL pointer dereference in GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace (graphicsstack.h) (bsc#1027779) - CVE-2017-6849: Fixed NULL pointer dereference in PoDoFo::PdfColorGray::~ PdfColorGray (PdfColor.cpp) (bsc#1027776) - CVE-2017-8378: Fixed denial of service (application crash) vectors related to m_offsets.size (PdfParser::ReadObjects func in base/PdfParser.cpp) (bsc#1037000) - Fixed NULL pointer dereference in PdfInfo::GuessFormat (pdfinfo.cpp) (bsc#1023072) Affected Software/OS: 'podofo' package(s) on openSUSE Leap 15.5, openSUSE Leap 15.6. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8981 http://www.openwall.com/lists/oss-security/2017/02/01/20 http://www.openwall.com/lists/oss-security/2017/02/02/15 Common Vulnerability Exposure (CVE) ID: CVE-2017-6840 https://blogs.gentoo.org/ago/2017/03/02/podofo-invalid-memory-read-in-colorchangergetcolorfromstack-colorchanger-cpp/ Common Vulnerability Exposure (CVE) ID: CVE-2017-6841 https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-graphicsstacktgraphicsstackelementtgraphicsstackelement-graphicsstack-h/ Common Vulnerability Exposure (CVE) ID: CVE-2017-6842 https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-colorchangergetcolorfromstack-colorchanger-cpp/ Common Vulnerability Exposure (CVE) ID: CVE-2017-6845 https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-podofopdfcoloroperator-pdfcolor-cpp/ Common Vulnerability Exposure (CVE) ID: CVE-2017-6849 https://blogs.gentoo.org/ago/2017/03/02/podofo-null-pointer-dereference-in-podofopdfcolorgraypdfcolorgray-pdfcolor-cpp/ Common Vulnerability Exposure (CVE) ID: CVE-2017-8378 https://github.com/xiangxiaobo/poc_and_report/tree/master/podofo_heapoverflow_PdfParser.ReadObjects Common Vulnerability Exposure (CVE) ID: CVE-2018-5309 https://bugzilla.redhat.com/show_bug.cgi?id=1532381 Common Vulnerability Exposure (CVE) ID: CVE-2018-8001 https://bugzilla.redhat.com/show_bug.cgi?id=1549469
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.