Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 492
Alerts This Week
Warning Icon 1 492

Debian: DLA-970-1 Critical Libpodofo Buffer Overflow and DoS

debian lts
Calendar Grey May 30, 2017
Scroller Debian Lts
Essential patch for Debian LTS addresses memory overflow vulnerabilities in libpodofo, ensuring stability and enhancing system protection.
Several heap-based buffer overflows and NULL pointer dereferences have been discovered in libpodofo, a library for manipulating PDF files, that allow remote attackers to cause a de...

Summary

For Debian 7 "Wheezy", these problems have been fixed in version
0.9.0-1.1+deb7u2.

We recommend that you upgrade your libpodofo packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: libpodofo
Version: 0.9.0-1.1+deb7u2
CVE ID: CVE-2017-6840 CVE-2017-6842 CVE-2017-6843
Debian Bug: 861557 861564 859330 859329

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.