Your submission was sent successfully! Close

CVE-2019-10023

Published: 24 March 2019

An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for the psOpMod case.

Priority

Low

CVSS 3 base score: 5.5

Status

Package Release Status
ipe
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(code not present)
cosmic Not vulnerable
(code not present)
disco Not vulnerable
(code not present)
eoan Not vulnerable
(code not present)
focal Not vulnerable
(code not present)
groovy Not vulnerable
(code not present)
hirsute Not vulnerable
(code not present)
impish Not vulnerable
(code not present)
jammy Not vulnerable
(code not present)
precise Does not exist

trusty Does not exist
(trusty was not-affected [code not present])
upstream Not vulnerable
(code not present)
xenial Not vulnerable
(code not present)
libextractor
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(code not present)
cosmic Not vulnerable
(code not present)
disco Not vulnerable
(code not present)
eoan Not vulnerable
(code not present)
focal Not vulnerable
(code not present)
groovy Not vulnerable
(code not present)
hirsute Not vulnerable
(code not present)
impish Not vulnerable
(code not present)
jammy Not vulnerable
(code not present)
precise Does not exist

trusty Does not exist
(trusty was not-affected [code not present])
upstream Needs triage

xenial Not vulnerable
(code not present)
poppler
Launchpad, Ubuntu, Debian
bionic Not vulnerable
(0.62.0-2ubuntu2.8)
cosmic Not vulnerable
(0.68.0-0ubuntu1.6)
disco Not vulnerable
(0.74.0-0ubuntu1.1)
eoan Not vulnerable
(0.76.1-0ubuntu3)
focal Not vulnerable
(0.76.1-0ubuntu3)
groovy Not vulnerable
(0.76.1-0ubuntu3)
hirsute Not vulnerable
(0.76.1-0ubuntu3)
impish Not vulnerable
(0.76.1-0ubuntu3)
jammy Not vulnerable
(0.76.1-0ubuntu3)
precise Does not exist

trusty Does not exist
(trusty was needed)
upstream Needs triage

xenial
Released (0.41.0-0ubuntu1.14)
Patches:
upstream: https://cgit.freedesktop.org/poppler/poppler/commit/?id=e2ab2fa9d8c41e0115b2c276a2594cd2f7c217e6
xpdf
Launchpad, Ubuntu, Debian
bionic Needed

cosmic Ignored
(reached end-of-life)
disco Ignored
(reached end-of-life)
eoan Ignored
(reached end-of-life)
focal Does not exist

groovy Does not exist

hirsute Ignored
(reached end-of-life)
impish Needed

jammy Needed

precise Does not exist

trusty Does not exist
(trusty was needed)
upstream Needs triage

xenial Ignored
(end of standard support, was needed)

Notes

AuthorNote
jdstrand
xpdf in koffice is 2.0
pfsmorigo
since there is not public repository, just a tarball, I analised
the file in question (Function.cc) with the affected version and
they seems the same
mdeslaur
same commit as CVE-2019-10018

References