QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in Pl_ASCII85Decoder::write (called from Pl_AES_PDF::flush and Pl_AES_PDF::finish) when a certain downstream write fails.

The remote host is affected by the vulnerability described in GLSA-202401-20 (QPDF: Buffer Overflow)

  - QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in     Pl_ASCII85Decoder::write (called from Pl_AES_PDF::flush and Pl_AES_PDF::finish) when a certain downstream     write fails. (CVE-2021-36978)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of qpdf installed on the remote host is prior to 5.0.1-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2409 advisory.

  - An issue was discovered in QPDF version 10.0.4, allows remote attackers to execute arbitrary code via     crafted .pdf file to Pl_ASCII85Decoder::write parameter in libqpdf. (CVE-2021-25786)

  - QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in     Pl_ASCII85Decoder::write (called from Pl_AES_PDF::flush and Pl_AES_PDF::finish) when a certain downstream     write fails. (CVE-2021-36978)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3548 advisory.

  - In QPDF 8.2.1, in libqpdf/QPDFWriter.cc, QPDFWriter::unparseObject and QPDFWriter::unparseChild have     recursive calls for a long time, which allows remote attackers to cause a denial of service via a crafted     PDF file. (CVE-2018-18020)

  - An issue was discovered in QPDF version 10.0.4, allows remote attackers to execute arbitrary code via     crafted .pdf file to Pl_ASCII85Decoder::write parameter in libqpdf. (CVE-2021-25786)

  - QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in     Pl_ASCII85Decoder::write (called from Pl_AES_PDF::flush and Pl_AES_PDF::finish) when a certain downstream     write fails. (CVE-2021-36978)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of qpdf installed on the remote host is prior to 5.0.1-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2104 advisory.

  - QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in     Pl_ASCII85Decoder::write (called from Pl_AES_PDF::flush and Pl_AES_PDF::finish) when a certain downstream     write fails. (CVE-2021-36978)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3248-1 advisory.

  - QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in     Pl_ASCII85Decoder::write (called from Pl_AES_PDF::flush and Pl_AES_PDF::finish) when a certain downstream     write fails. (CVE-2021-36978)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2670-1 advisory.

  - QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in     Pl_ASCII85Decoder::write (called from Pl_AES_PDF::flush and Pl_AES_PDF::finish) when a certain downstream     write fails. (CVE-2021-36978)

  - QPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF::processXRefStream.
    This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.
    (CVE-2022-34503)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2669-1 advisory.

  - QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in     Pl_ASCII85Decoder::write (called from Pl_AES_PDF::flush and Pl_AES_PDF::finish) when a certain downstream     write fails. (CVE-2021-36978)

  - QPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF::processXRefStream.
    This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.
    (CVE-2022-34503)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5026-2 advisory.

  - In QPDF 8.2.1, in libqpdf/QPDFWriter.cc, QPDFWriter::unparseObject and QPDFWriter::unparseChild have     recursive calls for a long time, which allows remote attackers to cause a denial of service via a crafted     PDF file. (CVE-2018-18020)

  - QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in     Pl_ASCII85Decoder::write (called from Pl_AES_PDF::flush and Pl_AES_PDF::finish) when a certain downstream     write fails. (CVE-2021-36978)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5026-1 advisory.

  - In QPDF 8.2.1, in libqpdf/QPDFWriter.cc, QPDFWriter::unparseObject and QPDFWriter::unparseChild have     recursive calls for a long time, which allows remote attackers to cause a denial of service via a crafted     PDF file. (CVE-2018-18020)

  - QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in     Pl_ASCII85Decoder::write (called from Pl_AES_PDF::flush and Pl_AES_PDF::finish) when a certain downstream     write fails. (CVE-2021-36978)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
188047	GLSA-202401-20 : QPDF: Buffer Overflow	Nessus	Gentoo Local Security Checks	medium
187822	Amazon Linux 2 : qpdf (ALAS-2024-2409)	Nessus	Amazon Linux Local Security Checks	medium
180269	Debian DLA-3548-1 : qpdf - LTS security update	Nessus	Debian Local Security Checks	medium
177871	Amazon Linux 2 : qpdf (ALAS-2023-2104)	Nessus	Amazon Linux Local Security Checks	medium
164979	SUSE SLED15 / SLES15 Security Update : qpdf (SUSE-SU-2022:3248-1)	Nessus	SuSE Local Security Checks	medium
163880	SUSE SLES15 Security Update : qpdf (SUSE-SU-2022:2670-1)	Nessus	SuSE Local Security Checks	medium
163874	SUSE SLES12 Security Update : qpdf (SUSE-SU-2022:2669-1)	Nessus	SuSE Local Security Checks	medium
152178	Ubuntu 16.04 ESM : QPDF vulnerabilities (USN-5026-2)	Nessus	Ubuntu Local Security Checks	medium
152145	Ubuntu 18.04 LTS / 20.04 LTS : QPDF vulnerabilities (USN-5026-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2021-36978

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium