CVE-2018-1000036 - Vulnerability Details - OpenCVE

In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a denial of service (memory leak) via a crafted file.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Artifex	Mupdf
Debian	Debian Linux

Configuration 1 [-]

cpe:2.3:a:artifex:mupdf:*:*:*:*:*:*:*:*

Configuration 2 [-]

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5502
https://bugs.ghostscript.com/show_bug.cgi?id=698887
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=8aa2bd34065d2844aae778bd4cc20c74bbcd9406
https://lists.debian.org/debian-lts-announce/2021/09/msg00013.html
https://security.gentoo.org/glsa/201811-15

History

Thu, 12 Sep 2024 17:00:00 +0000

Type	Values Removed	Values Added
References		https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=8aa2bd34065d2844aae778bd4cc20c74bbcd9406

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2018-05-24T13:00:00

Updated: 2024-09-13T16:11:02.461Z

Reserved: 2018-02-02T00:00:00

Link: CVE-2018-1000036

Vulnrichment

Updated: 2024-08-05T12:33:48.627Z

NVD

Status : Modified

Published: 2018-05-24T13:29:00.337

Modified: 2024-11-21T03:39:29.173

Link: CVE-2018-1000036

Redhat

No data.

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2018-1000036", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateReserved": "2018-02-02T00:00:00", "dateUpdated": "2024-09-13T16:11:02.461Z", "datePublished": "2018-05-24T13:00:00"}, "containers": {"cna": {"dateAssigned": "2018-05-18T00:00:00", "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-09-12T16:47:16.754782"}, "descriptions": [{"lang": "en", "value": "In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a denial of service (memory leak) via a crafted file."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5502"}, {"name": "GLSA-201811-15", "tags": ["vendor-advisory"], "url": "https://security.gentoo.org/glsa/201811-15"}, {"name": "[debian-lts-announce] 20210923 [SECURITY] [DLA 2765-1] mupdf security update", "tags": ["mailing-list"], "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00013.html"}, {"url": "https://bugs.ghostscript.com/show_bug.cgi?id=698887"}, {"url": "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=8aa2bd34065d2844aae778bd4cc20c74bbcd9406"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}], "datePublic": "2018-04-19T00:00:00"}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T12:33:48.627Z"}, "title": "CVE Program Container", "references": [{"url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5502", "tags": ["x_transferred"]}, {"name": "GLSA-201811-15", "tags": ["vendor-advisory", "x_transferred"], "url": "https://security.gentoo.org/glsa/201811-15"}, {"name": "[debian-lts-announce] 20210923 [SECURITY] [DLA 2765-1] mupdf security update", "tags": ["mailing-list", "x_transferred"], "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00013.html"}, {"url": "https://bugs.ghostscript.com/show_bug.cgi?id=698887", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-09-13T16:10:54.412706Z", "id": "CVE-2018-1000036", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-13T16:11:02.461Z"}}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5502", "tags": ["x_transferred"]}, {"url": "https://security.gentoo.org/glsa/201811-15", "name": "GLSA-201811-15", "tags": ["vendor-advisory", "x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00013.html", "name": "[debian-lts-announce] 20210923 [SECURITY] [DLA 2765-1] mupdf security update", "tags": ["mailing-list", "x_transferred"]}, {"url": "https://bugs.ghostscript.com/show_bug.cgi?id=698887", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T12:33:48.627Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2018-1000036", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-13T16:10:54.412706Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-13T16:10:58.354Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2018-04-19T00:00:00", "references": [{"url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5502"}, {"url": "https://security.gentoo.org/glsa/201811-15", "name": "GLSA-201811-15", "tags": ["vendor-advisory"]}, {"url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00013.html", "name": "[debian-lts-announce] 20210923 [SECURITY] [DLA 2765-1] mupdf security update", "tags": ["mailing-list"]}, {"url": "https://bugs.ghostscript.com/show_bug.cgi?id=698887"}, {"url": "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=8aa2bd34065d2844aae778bd4cc20c74bbcd9406"}], "dateAssigned": "2018-05-18T00:00:00", "descriptions": [{"lang": "en", "value": "In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a denial of service (memory leak) via a crafted file."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-09-12T16:47:16.754782"}}}, "cveMetadata": {"cveId": "CVE-2018-1000036", "state": "PUBLISHED", "dateUpdated": "2024-09-13T16:11:02.461Z", "dateReserved": "2018-02-02T00:00:00", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2018-05-24T13:00:00", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:artifex:mupdf:*:*:*:*:*:*:*:*", "matchCriteriaId": "98C162E1-CD83-4DF5-92FD-938F0CCDA53E", "versionEndIncluding": "1.12.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", "matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a denial of service (memory leak) via a crafted file."}, {"lang": "es", "value": "En MuPDF 1.12.0 y anteriores, m\u00faltiples fugas de memoria en el analizador PDF permiten que un atacante provoque una denegaci\u00f3n de servicio (fuga de memoria) mediante un archivo manipulado."}], "id": "CVE-2018-1000036", "lastModified": "2024-11-21T03:39:29.173", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-05-24T13:29:00.337", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5502"}, {"source": "cve@mitre.org", "url": "https://bugs.ghostscript.com/show_bug.cgi?id=698887"}, {"source": "cve@mitre.org", "url": "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=8aa2bd34065d2844aae778bd4cc20c74bbcd9406"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00013.html"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://security.gentoo.org/glsa/201811-15"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5502"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://bugs.ghostscript.com/show_bug.cgi?id=698887"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00013.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://security.gentoo.org/glsa/201811-15"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-772"}], "source": "nvd@nist.gov", "type": "Primary"}]}