| Revision Date: | 2022-06-30 | Version: | 1 |
| Title: | CVE-2018-1000801 |
| Description: |
okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" in "core/document.cpp" that can result in Arbitrary file creation on the user workstation. This attack appear to be exploitable via he victim must open a specially crafted Okular archive. This issue appears to have been corrected in version 18.08.1
|
| Family: | unix | Class: | vulnerability |
| Status: | | Reference(s): | CVE-2018-1000801
openSUSE-SU-2018:2727-1
openSUSE-SU-2018:2733-1
openSUSE-SU-2018:2733-2
Mitre CVE-2018-1000801
SUSE CVE-2018-1000801
openSUSE-SU-2018:2727-1
openSUSE-SU-2018:2733-1
openSUSE-SU-2018:2733-2
|
| Platform(s): | openSUSE Leap 15.0
openSUSE Leap 15.3
openSUSE Leap 15.4
openSUSE Leap 42.3
openSUSE Tumbleweed
SUSE Linux Enterprise High Performance Computing 12 SP3
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 12 SP3
SUSE Linux Enterprise Server for SAP Applications 12 SP4
SUSE Linux Enterprise Server for SAP Applications 12 SP5
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Package Hub for SUSE Linux Enterprise 12 SP3
SUSE Package Hub for SUSE Linux Enterprise 15
| Product(s): | |
| Definition Synopsis |
| SUSE Package Hub for SUSE Linux Enterprise 12 SP3 is installed AND Package Information
okular-17.04.2-12 is installed
OR okular-devel-17.04.2-12 is installed
OR okular-lang-17.04.2-12 is installed
|
| Definition Synopsis |
| openSUSE Leap 15.0 is installed
AND Package Information
okular-17.12.3-lp150.5 is installed
AND okular is signed with openSUSE key
OR
okular-devel-17.12.3-lp150.5 is installed
AND okular-devel is signed with openSUSE key
OR
okular-lang-17.12.3-lp150.5 is installed
AND okular-lang is signed with openSUSE key
|
| Definition Synopsis |
| openSUSE Leap 42.3 is installed
AND Package Information
okular-17.04.2-7 is installed
AND okular is signed with openSUSE key
OR
okular-devel-17.04.2-7 is installed
AND okular-devel is signed with openSUSE key
OR
okular-lang-17.04.2-7 is installed
AND okular-lang is signed with openSUSE key
|
| Definition Synopsis |
| SUSE Package Hub for SUSE Linux Enterprise 15 is installed
AND Package Information
okular-17.12.3-bp150.5 is installed
OR okular-devel-17.12.3-bp150.5 is installed
OR okular-lang-17.12.3-bp150.5 is installed
|
| Definition Synopsis |
| openSUSE Tumbleweed is installed
AND Package Information
okular-21.08.1-1.2 is installed
OR okular-devel-21.08.1-1.2 is installed
OR okular-lang-21.08.1-1.2 is installed
OR okular-mobile-21.08.1-1.2 is installed
OR okular-spectre-21.08.1-1.2 is installed
|
| Definition Synopsis |
| SUSE Package Hub for SUSE Linux Enterprise 12 SP3 is installed
AND Package Information
okular-17.04.2-12.1 is installed
OR okular-devel-17.04.2-12.1 is installed
OR okular-lang-17.04.2-12.1 is installed
|
| Definition Synopsis |
| SUSE Package Hub for SUSE Linux Enterprise 15 is installed
AND Package Information
okular-17.12.3-bp150.5.1 is installed
OR okular-devel-17.12.3-bp150.5.1 is installed
OR okular-lang-17.12.3-bp150.5.1 is installed
|
| Definition Synopsis |
| openSUSE Leap 15.3 is installed
AND Package Information
okular-20.04.2-bp153.1.31 is installed
AND okular is signed with openSUSE key
OR
okular-lang-20.04.2-bp153.1.31 is installed
AND okular-lang is signed with openSUSE key
|
| Definition Synopsis |
| openSUSE Leap 15.4 is installed
AND Package Information
okular-21.12.3-bp154.1.25 is installed
AND okular is signed with openSUSE key
OR
okular-lang-21.12.3-bp154.1.25 is installed
AND okular-lang is signed with openSUSE key
|