CVE Vulnerabilities

CVE-2018-8002

Loop with Unreachable Exit Condition ('Infinite Loop')

Published: Mar 09, 2018 | Modified: Nov 21, 2024
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.

Weakness

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected Software

Name Vendor Start Version End Version
Podofo Podofo_project 0.9.5 (including) 0.9.5 (including)
Libpodofo Ubuntu artful *
Libpodofo Ubuntu bionic *
Libpodofo Ubuntu cosmic *
Libpodofo Ubuntu disco *
Libpodofo Ubuntu eoan *
Libpodofo Ubuntu esm-apps/bionic *
Libpodofo Ubuntu esm-apps/focal *
Libpodofo Ubuntu esm-apps/jammy *
Libpodofo Ubuntu esm-apps/xenial *
Libpodofo Ubuntu focal *
Libpodofo Ubuntu groovy *
Libpodofo Ubuntu hirsute *
Libpodofo Ubuntu impish *
Libpodofo Ubuntu jammy *
Libpodofo Ubuntu kinetic *
Libpodofo Ubuntu lunar *
Libpodofo Ubuntu mantic *
Libpodofo Ubuntu trusty *
Libpodofo Ubuntu trusty/esm *
Libpodofo Ubuntu upstream *
Libpodofo Ubuntu xenial *

References