Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2018-2022 and is owned by Tenable, Inc. or an Affiliate thereof.SUSE_SU-2018-3066-1.NASL
HistoryOct 09, 2018 - 12:00 a.m.

SUSE SLED12 / SLES12 Security Update : qpdf (SUSE-SU-2018:3066-1)

2018-10-0900:00:00
This script is Copyright (C) 2018-2022 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
18

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

74.8%

JSON

This update for qpdf fixes the following issues :

qpdf was updated to 7.1.1.

Security issues fixed :

CVE-2017-11627: A stack-consumption vulnerability which allows attackers to cause DoS (bsc#1050577).

CVE-2017-11625: A stack-consumption vulnerability which allows attackers to cause DoS (bsc#1050579).

CVE-2017-11626: A stack-consumption vulnerability which allows attackers to cause DoS (bsc#1050578).

CVE-2017-11624: A stack-consumption vulnerability which allows attackers to cause DoS (bsc#1050581).

CVE-2017-12595: Stack overflow when processing deeply nested arrays and dictionaries (bsc#1055960).

CVE-2017-9209: Remote attackers can cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document (bsc#1040312).

CVE-2017-9210: Remote attackers can cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document (bsc#1040313).

CVE-2017-9208: Remote attackers can cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document (bsc#1040311).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from SUSE update advisory SUSE-SU-2018:3066-1.
# The text itself is copyright (C) SUSE.
#

include("compat.inc");

if (description)
{
  script_id(117993);
  script_version("1.4");
  script_set_attribute(attribute:"plugin_modification_date", value:"2022/02/10");

  script_cve_id("CVE-2017-11624", "CVE-2017-11625", "CVE-2017-11626", "CVE-2017-11627", "CVE-2017-12595", "CVE-2017-9208", "CVE-2017-9209", "CVE-2017-9210");

  script_name(english:"SUSE SLED12 / SLES12 Security Update : qpdf (SUSE-SU-2018:3066-1)");
  script_summary(english:"Checks rpm output for the updated packages.");

  script_set_attribute(
    attribute:"synopsis",
    value:"The remote SUSE host is missing one or more security updates."
  );
  script_set_attribute(
    attribute:"description",
    value:
"This update for qpdf fixes the following issues :

qpdf was updated to 7.1.1.

Security issues fixed :

CVE-2017-11627: A stack-consumption vulnerability which allows
attackers to cause DoS (bsc#1050577).

CVE-2017-11625: A stack-consumption vulnerability which allows
attackers to cause DoS (bsc#1050579).

CVE-2017-11626: A stack-consumption vulnerability which allows
attackers to cause DoS (bsc#1050578).

CVE-2017-11624: A stack-consumption vulnerability which allows
attackers to cause DoS (bsc#1050581).

CVE-2017-12595: Stack overflow when processing deeply nested arrays
and dictionaries (bsc#1055960).

CVE-2017-9209: Remote attackers can cause a denial of service
(infinite recursion and stack consumption) via a crafted PDF document
(bsc#1040312).

CVE-2017-9210: Remote attackers can cause a denial of service
(infinite recursion and stack consumption) via a crafted PDF document
(bsc#1040313).

CVE-2017-9208: Remote attackers can cause a denial of service
(infinite recursion and stack consumption) via a crafted PDF document
(bsc#1040311).

  - Check release notes for detailed bug fixes.

  - http://qpdf.sourceforge.net/files/qpdf-manual.html#ref.release-notes

Note that Tenable Network Security has extracted the preceding
description block directly from the SUSE security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"http://qpdf.sourceforge.net/files/qpdf-manual.html#ref.release-notes"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1040311"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1040312"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1040313"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1050577"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1050578"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1050579"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1050581"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.suse.com/show_bug.cgi?id=1055960"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.suse.com/security/cve/CVE-2017-11624/"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.suse.com/security/cve/CVE-2017-11625/"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.suse.com/security/cve/CVE-2017-11626/"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.suse.com/security/cve/CVE-2017-11627/"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.suse.com/security/cve/CVE-2017-12595/"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.suse.com/security/cve/CVE-2017-9208/"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.suse.com/security/cve/CVE-2017-9209/"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.suse.com/security/cve/CVE-2017-9210/"
  );
  # https://www.suse.com/support/update/announcement/2018/suse-su-20183066-1/
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.nessus.org/u?787b25b4"
  );
  script_set_attribute(
    attribute:"solution",
    value:
"To install this SUSE Security Update use the SUSE recommended
installation methods like YaST online_update or 'zypper patch'.

Alternatively you can run the command listed for your product :

SUSE OpenStack Cloud 7:zypper in -t patch
SUSE-OpenStack-Cloud-7-2018-2169=1

SUSE Linux Enterprise Software Development Kit 12-SP3:zypper in -t
patch SUSE-SLE-SDK-12-SP3-2018-2169=1

SUSE Linux Enterprise Server for SAP 12-SP2:zypper in -t patch
SUSE-SLE-SAP-12-SP2-2018-2169=1

SUSE Linux Enterprise Server for SAP 12-SP1:zypper in -t patch
SUSE-SLE-SAP-12-SP1-2018-2169=1

SUSE Linux Enterprise Server 12-SP3:zypper in -t patch
SUSE-SLE-SERVER-12-SP3-2018-2169=1

SUSE Linux Enterprise Server 12-SP2-LTSS:zypper in -t patch
SUSE-SLE-SERVER-12-SP2-2018-2169=1

SUSE Linux Enterprise Server 12-SP1-LTSS:zypper in -t patch
SUSE-SLE-SERVER-12-SP1-2018-2169=1

SUSE Linux Enterprise Server 12-LTSS:zypper in -t patch
SUSE-SLE-SERVER-12-2018-2169=1

SUSE Linux Enterprise Desktop 12-SP3:zypper in -t patch
SUSE-SLE-DESKTOP-12-SP3-2018-2169=1

SUSE Enterprise Storage 4:zypper in -t patch
SUSE-Storage-4-2018-2169=1"
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2017-12595");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:cups-filters");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:cups-filters-cups-browsed");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:cups-filters-cups-browsed-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:cups-filters-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:cups-filters-debugsource");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:cups-filters-foomatic-rip");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:cups-filters-foomatic-rip-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:cups-filters-ghostscript");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:cups-filters-ghostscript-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libqpdf18");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:libqpdf18-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:qpdf");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:qpdf-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:qpdf-debugsource");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:suse_linux:12");

  script_set_attribute(attribute:"vuln_publication_date", value:"2017/05/23");
  script_set_attribute(attribute:"patch_publication_date", value:"2018/10/07");
  script_set_attribute(attribute:"plugin_publication_date", value:"2018/10/09");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2018-2022 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"SuSE Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release !~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "SUSE");
os_ver = pregmatch(pattern: "^(SLE(S|D)\d+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "SUSE");
os_ver = os_ver[1];
if (! preg(pattern:"^(SLED12|SLES12)$", string:os_ver)) audit(AUDIT_OS_NOT, "SUSE SLED12 / SLES12", "SUSE " + os_ver);

if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if (cpu !~ "^i[3-6]86$" && "x86_64" >!< cpu && "s390x" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "SUSE " + os_ver, cpu);

sp = get_kb_item("Host/SuSE/patchlevel");
if (isnull(sp)) sp = "0";
if (os_ver == "SLES12" && (! preg(pattern:"^(0|1|2|3)$", string:sp))) audit(AUDIT_OS_NOT, "SLES12 SP0/1/2/3", os_ver + " SP" + sp);
if (os_ver == "SLED12" && (! preg(pattern:"^(3)$", string:sp))) audit(AUDIT_OS_NOT, "SLED12 SP3", os_ver + " SP" + sp);


flag = 0;
if (rpm_check(release:"SLES12", sp:"1", reference:"cups-filters-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"cups-filters-cups-browsed-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"cups-filters-cups-browsed-debuginfo-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"cups-filters-debuginfo-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"cups-filters-debugsource-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"cups-filters-foomatic-rip-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"cups-filters-foomatic-rip-debuginfo-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"cups-filters-ghostscript-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"cups-filters-ghostscript-debuginfo-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"libqpdf18-7.1.1-3.3.4")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"libqpdf18-debuginfo-7.1.1-3.3.4")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"qpdf-7.1.1-3.3.4")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"qpdf-debuginfo-7.1.1-3.3.4")) flag++;
if (rpm_check(release:"SLES12", sp:"1", reference:"qpdf-debugsource-7.1.1-3.3.4")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"cups-filters-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"cups-filters-cups-browsed-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"cups-filters-cups-browsed-debuginfo-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"cups-filters-debuginfo-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"cups-filters-debugsource-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"cups-filters-foomatic-rip-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"cups-filters-foomatic-rip-debuginfo-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"cups-filters-ghostscript-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"cups-filters-ghostscript-debuginfo-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"libqpdf18-7.1.1-3.3.4")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"libqpdf18-debuginfo-7.1.1-3.3.4")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"qpdf-7.1.1-3.3.4")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"qpdf-debuginfo-7.1.1-3.3.4")) flag++;
if (rpm_check(release:"SLES12", sp:"0", reference:"qpdf-debugsource-7.1.1-3.3.4")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"cups-filters-1.0.58-19.2.3")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"cups-filters-cups-browsed-1.0.58-19.2.3")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"cups-filters-cups-browsed-debuginfo-1.0.58-19.2.3")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"cups-filters-debuginfo-1.0.58-19.2.3")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"cups-filters-debugsource-1.0.58-19.2.3")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"cups-filters-foomatic-rip-1.0.58-19.2.3")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"cups-filters-foomatic-rip-debuginfo-1.0.58-19.2.3")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"cups-filters-ghostscript-1.0.58-19.2.3")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"cups-filters-ghostscript-debuginfo-1.0.58-19.2.3")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libqpdf18-7.1.1-3.3.4")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"libqpdf18-debuginfo-7.1.1-3.3.4")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"qpdf-7.1.1-3.3.4")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"qpdf-debuginfo-7.1.1-3.3.4")) flag++;
if (rpm_check(release:"SLES12", sp:"3", reference:"qpdf-debugsource-7.1.1-3.3.4")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"cups-filters-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"cups-filters-cups-browsed-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"cups-filters-cups-browsed-debuginfo-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"cups-filters-debuginfo-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"cups-filters-debugsource-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"cups-filters-foomatic-rip-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"cups-filters-foomatic-rip-debuginfo-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"cups-filters-ghostscript-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"cups-filters-ghostscript-debuginfo-1.0.58-15.2.1")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libqpdf18-7.1.1-3.3.4")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"libqpdf18-debuginfo-7.1.1-3.3.4")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"qpdf-7.1.1-3.3.4")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"qpdf-debuginfo-7.1.1-3.3.4")) flag++;
if (rpm_check(release:"SLES12", sp:"2", reference:"qpdf-debugsource-7.1.1-3.3.4")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"cups-filters-1.0.58-19.2.3")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"cups-filters-cups-browsed-1.0.58-19.2.3")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"cups-filters-cups-browsed-debuginfo-1.0.58-19.2.3")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"cups-filters-debuginfo-1.0.58-19.2.3")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"cups-filters-debugsource-1.0.58-19.2.3")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"cups-filters-foomatic-rip-1.0.58-19.2.3")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"cups-filters-foomatic-rip-debuginfo-1.0.58-19.2.3")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"cups-filters-ghostscript-1.0.58-19.2.3")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"cups-filters-ghostscript-debuginfo-1.0.58-19.2.3")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libqpdf18-7.1.1-3.3.4")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"libqpdf18-debuginfo-7.1.1-3.3.4")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"qpdf-debuginfo-7.1.1-3.3.4")) flag++;
if (rpm_check(release:"SLED12", sp:"3", cpu:"x86_64", reference:"qpdf-debugsource-7.1.1-3.3.4")) flag++;


if (flag)
{
  if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
  else security_warning(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "qpdf");
}
VendorProductVersionCPE
novellsuse_linuxcups-filtersp-cpe:/a:novell:suse_linux:cups-filters
novellsuse_linuxcups-filters-cups-browsedp-cpe:/a:novell:suse_linux:cups-filters-cups-browsed
novellsuse_linuxcups-filters-cups-browsed-debuginfop-cpe:/a:novell:suse_linux:cups-filters-cups-browsed-debuginfo
novellsuse_linuxcups-filters-debuginfop-cpe:/a:novell:suse_linux:cups-filters-debuginfo
novellsuse_linuxcups-filters-debugsourcep-cpe:/a:novell:suse_linux:cups-filters-debugsource
novellsuse_linuxcups-filters-foomatic-ripp-cpe:/a:novell:suse_linux:cups-filters-foomatic-rip
novellsuse_linuxcups-filters-foomatic-rip-debuginfop-cpe:/a:novell:suse_linux:cups-filters-foomatic-rip-debuginfo
novellsuse_linuxcups-filters-ghostscriptp-cpe:/a:novell:suse_linux:cups-filters-ghostscript
novellsuse_linuxcups-filters-ghostscript-debuginfop-cpe:/a:novell:suse_linux:cups-filters-ghostscript-debuginfo
novellsuse_linuxlibqpdf18p-cpe:/a:novell:suse_linux:libqpdf18
Rows per page:
1-10 of 151

References

Related

nessus 12
openvas 16
mageia 2
fedora 8
ubuntu 1
ubuntucve 8
cve 8
osv 8
debiancve 8
alpinelinux 8
nvd 8
prion 8
cvelist 8
redhatcve 8
nessus
nessus
openSUSE Security Update : qpdf (openSUSE-2018-176)
2018-02-20 00:00:00
SUSE SLES12 Security Update : qpdf (SUSE-SU-2018:3066-2)
2018-10-22 00:00:00
Fedora 26 : qpdf (2017-e58a762c3f)
2017-08-07 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2018:3066-1)
2021-04-19 00:00:00
Mageia: Security Advisory (MGASA-2018-0145)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:3066-2)
2021-04-19 00:00:00
mageia
mageia
Updated qpdf packages fix security vulnerabilities
2018-02-26 19:23:22
Updated qpdf packages fix security vulnerabilities
2017-08-03 22:05:47
fedora
fedora
[SECURITY] Fedora 26 Update: qpdf-6.0.0-6.fc26
2017-08-06 22:27:53
[SECURITY] Fedora 26 Update: qpdf-6.0.0-8.fc26
2017-08-15 17:24:51
[SECURITY] Fedora 25 Update: cups-filters-1.10.0-4.fc25
2017-08-18 19:52:33
ubuntu
ubuntu
QPDF vulnerabilities
2018-05-07 00:00:00
ubuntucve
ubuntucve
CVE-2017-11625
2017-07-25 00:00:00
CVE-2017-11626
2017-07-25 00:00:00
CVE-2017-12595
2017-08-27 00:00:00
cve
cve
CVE-2017-11624
2017-07-25 23:29:00
CVE-2017-11625
2017-07-25 23:29:00
CVE-2017-12595
2017-08-27 15:29:00
osv
osv
CVE-2017-12595
2017-08-27 15:29:00
CVE-2017-11624
2017-07-25 23:29:00
CVE-2017-11626
2017-07-25 23:29:00
debiancve
debiancve
CVE-2017-11626
2017-07-25 23:29:00
CVE-2017-12595
2017-08-27 15:29:00
CVE-2017-11625
2017-07-25 23:29:00
alpinelinux
alpinelinux
CVE-2017-12595
2017-08-27 15:29:00
CVE-2017-11626
2017-07-25 23:29:00
CVE-2017-11627
2017-07-25 23:29:00
nvd
nvd
CVE-2017-12595
2017-08-27 15:29:00
CVE-2017-11626
2017-07-25 23:29:00
CVE-2017-11627
2017-07-25 23:29:00
prion
prion
Stack overflow
2017-07-25 23:29:00
Stack overflow
2017-07-25 23:29:00
Stack overflow
2017-07-25 23:29:00
cvelist
cvelist
CVE-2017-11626
2017-07-25 23:00:00
CVE-2017-11624
2017-07-25 23:00:00
CVE-2017-11625
2017-07-25 23:00:00
redhatcve
redhatcve
CVE-2017-11626
2017-07-26 20:18:51
CVE-2017-11624
2017-07-26 20:18:26
CVE-2017-11625
2017-07-26 20:18:40

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

74.8%

JSON
Related for SUSE_SU-2018-3066-1.NASL
nessus12openvas16mageia2fedora8ubuntu1ubuntucve8cve8osv8debiancve8alpinelinux8nvd8prion8cvelist8redhatcve8