Oval Definition:oval:org.opensuse.security:def:201818458
Revision Date:2023-06-22Version:1
Title:CVE-2018-18458
Description:

The function DCTStream::decodeImage in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted pdf file, as demonstrated by pdftoppm.
Family:unixClass:vulnerability
Status:Reference(s):Mitre CVE-2018-18458
SUSE CVE-2018-18458
Platform(s):SUSE Linux Enterprise Desktop 15 SP5
SUSE Linux Enterprise High Performance Computing 15 SP5
SUSE Linux Enterprise Module for Basesystem 15 SP5
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server for SAP Applications 15 SP5
SUSE Linux Enterprise Workstation Extension 15 SP5
Product(s):
Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 15 SP5 is installed
  • OR SUSE Linux Enterprise Server 15 SP5 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP5 is installed
  • OR SUSE Linux Enterprise Workstation Extension 15 SP5 is installed
  • AND libpoppler117 is not affected
  • OR Package Information
  • SUSE Linux Enterprise Desktop 15 SP5 is installed
  • OR SUSE Linux Enterprise High Performance Computing 15 SP5 is installed
  • OR SUSE Linux Enterprise Module for Basesystem 15 SP5 is installed
  • OR SUSE Linux Enterprise Server 15 SP5 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 15 SP5 is installed
  • AND
  • libpoppler-cpp0 is not affected
  • OR libpoppler-devel is not affected
  • OR libpoppler-glib-devel is not affected
  • OR libpoppler-glib8 is not affected
  • OR libpoppler126 is not affected
  • OR libpoppler89 is not affected
  • OR poppler-tools is not affected
  • OR typelib-1_0-Poppler-0_18 is not affected
  • BACK