CVE Vulnerabilities

CVE-2018-5686

Loop with Unreachable Exit Condition ('Infinite Loop')

Published: Jan 14, 2018 | Modified: Nov 21, 2024
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

In MuPDF 1.12.0, there is an infinite loop vulnerability and application hang in the pdf_parse_array function (pdf/pdf-parse.c) because EOF is not considered. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file.

Weakness

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected Software

Name Vendor Start Version End Version
Mupdf Artifex 1.12.0 (including) 1.12.0 (including)
Mupdf Ubuntu artful *
Mupdf Ubuntu bionic *
Mupdf Ubuntu cosmic *
Mupdf Ubuntu esm-apps/bionic *
Mupdf Ubuntu esm-apps/xenial *
Mupdf Ubuntu trusty *
Mupdf Ubuntu upstream *
Mupdf Ubuntu xenial *

References