https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 13:05:43 +0000 https://vulnerability.circl.lu/vuln/CERTFR-2022-AVI-267 CERTFR-2022-AVI-267 https://vulnerability.circl.lu/vuln/CERTFR-2022-AVI-267 https://vulnerability.circl.lu/vuln/bdu:2022-05816 bdu:2022-05816 https://vulnerability.circl.lu/vuln/bdu:2022-05816 https://vulnerability.circl.lu/vuln/cnvd-2018-10256 cnvd-2018-10256 https://vulnerability.circl.lu/vuln/cnvd-2018-10256 https://vulnerability.circl.lu/vuln/fkie_cve-2018-10768 <p>There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5. A crafted input will lead to a remote denial of service attack. Later Ubuntu packages such as for Poppler 0.41.0 are not affected.</p> <p>There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5. A crafted input will lead to a remote denial of service attack. Later Ubuntu packages such as for Poppler 0.41.0 are not affected.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2018-10768 https://vulnerability.circl.lu/vuln/ghsa-vj6w-p4m3-pj3w <p>There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5. A crafted input will lead to a remote denial of service attack. Later Ubuntu packages such as for Poppler 0.41.0 are not affected.</p> <p>There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5. A crafted input will lead to a remote denial of service attack. Later Ubuntu packages such as for Poppler 0.41.0 are not affected.</p> https://vulnerability.circl.lu/vuln/ghsa-vj6w-p4m3-pj3w https://vulnerability.circl.lu/vuln/gsd-2018-10768 gsd-2018-10768 https://vulnerability.circl.lu/vuln/gsd-2018-10768 https://vulnerability.circl.lu/vuln/rhsa-2018:3140 <p>freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to crash freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read gdk-pixbuf2: Heap overflow in the gdk_pixbuf__jpeg_image_load_increment function poppler: Infinite recursion in fofi/FoFiType1C.cc:FoFiType1C::cvtGlyph() function allows denial of service webkitgtk: memory corruption processing maliciously crafted web content webkitgtk: memory corruption processing maliciously crafted web content webkitgtk: memory corruption processing maliciously crafted web content libgxps: heap based buffer over read in ft_font_face_hash function of gxps-fonts.c libgxps: Stack-based buffer overflow in calling glib in gxps_images_guess_content_type of gcontenttype.c poppler: NULL pointer dereference in Annot.h:AnnotPath::getCoordsLength() allows for denial of service via crafted PDF webkitgtk: Improper TLS certificate verification for WebSocket connections webkitgtk: WebSockets don&#39;t use system proxy settings libsoup: Crash in soup_cookie_jar.c:get_cookies() on empty hostnames poppler: out of bounds read in pdfunite accountsservice: insufficient path check in user_change_icon_file_authorized_cb() in user.c</p> <p>freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to crash freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read gdk-pixbuf2: Heap overflow in the gdk_pixbuf__jpeg_image_load_increment function poppler: Infinite recursion in fofi/FoFiType1C.cc:FoFiType1C::cvtGlyph() function allows denial of service webkitgtk: memory corruption processing maliciously crafted web content webkitgtk: memory corruption processing maliciously crafted web content webkitgtk: memory corruption processing maliciously crafted web content libgxps: heap based buffer over read in ft_font_face_hash function of gxps-fonts.c libgxps: Stack-based buffer overflow in calling glib in gxps_images_guess_content_type of gcontenttype.c poppler: NULL pointer dereference in Annot.h:AnnotPath::getCoordsLength() allows for denial of service via crafted PDF webkitgtk: Improper TLS certificate verification for WebSocket connections webkitgtk: WebSockets don&#39;t use system proxy settings libsoup: Crash in soup_cookie_jar.c:get_cookies() on empty hostnames poppler: out of bounds read in pdfunite accountsservice: insufficient path check in user_change_icon_file_authorized_cb() in user.c</p> https://vulnerability.circl.lu/vuln/rhsa-2018:3140 https://vulnerability.circl.lu/vuln/suse-su-2020:1626-1 <p>Security update for poppler</p> <p>Security update for poppler</p> https://vulnerability.circl.lu/vuln/suse-su-2020:1626-1 https://vulnerability.circl.lu/vuln/ubuntu-cve-2018-10768 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: poppler</p> <p>There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5. A crafted input will lead to a remote denial of service attack. Later Ubuntu packages such as for Poppler 0.41.0 are not affected.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: poppler</p> <p>There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5. A crafted input will lead to a remote denial of service attack. Later Ubuntu packages such as for Poppler 0.41.0 are not affected.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2018-10768