CVE-2018-17407: canonical ubuntu_linux

CVSS: 7.8v3.0HighModified

AliasesMGASA-2018-0397SUSE-SU-2018:3033-1SUSE-SU-2018:3033-2+7 more

Published 23-09-2018Last modified 05-08-2024

Vulnerability summary

CVE-2018-17407 is a high (CVSS 7.8) vulnerability in canonical ubuntu_linux. EPSS estimates a 2.06% chance of exploitation in the next 30 days, higher than 81% of scored vulnerabilities.

Overall risk

32/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.8/10

010

High · v3.0 (NVD)

EPSS score

2.06%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2 · Related 2

OPENSUSE-SU-2024:11431-1 USN-3788-1

Timeline

23-09-2018
PublishedVulnerability first disclosed.
05-08-2024
Last modifiedVulnerability information updated.

Description

An issue was discovered in t1_check_unusual_charstring functions in writet1.c files in TeX Live before 2018-09-21. A buffer overflow in the handling of Type 1 fonts allows arbitrary code execution when a malicious font is loaded by one of the vulnerable tools: pdflatex, pdftex, dvips, or luatex.

CVSS metrics

5 scores · 4 sources · 2 versions

v3.07.8v2.06.8

EPSS trend

Probability

2.06%

Chance of exploitation in the next 30 days

Percentile

81%

Versus all other CVEs

30-day change

0.00 pp

From 2.06% on 19-09-2026

19-09-202619-10-2026

EPSS score

2.06%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Affected systems

Redhat195 products

texlive< 2:2012-45.20130427_r30134.el7
texlive-adjustbox< 2:svn26555.0-45.el7
texlive-adjustbox-doc< 2:svn26555.0-45.el7
texlive-ae< 2:svn15878.1.4-45.el7
texlive-ae-doc< 2:svn15878.1.4-45.el7

texlive-algorithms< 2:svn15878.0.1-45.el7
texlive-algorithms-doc< 2:svn15878.0.1-45.el7
texlive-amscls< 2:svn29207.0-45.el7
texlive-amscls-doc< 2:svn29207.0-45.el7
texlive-amsfonts< 2:svn29208.3.04-45.el7
texlive-amsfonts-doc< 2:svn29208.3.04-45.el7
texlive-amsmath< 2:svn29327.2.14-45.el7
texlive-amsmath-doc< 2:svn29327.2.14-45.el7
texlive-anysize< 2:svn15878.0-45.el7
texlive-anysize-doc< 2:svn15878.0-45.el7
texlive-appendix< 2:svn15878.1.2b-45.el7
texlive-appendix-doc< 2:svn15878.1.2b-45.el7
texlive-arabxetex< 2:svn17470.v1.1.4-45.el7
texlive-arabxetex-doc< 2:svn17470.v1.1.4-45.el7
texlive-arphic< 2:svn15878.0-45.el7
texlive-arphic-doc< 2:svn15878.0-45.el7
texlive-attachfile< 2:svn21866.v1.5b-45.el7
texlive-attachfile-doc< 2:svn21866.v1.5b-45.el7
texlive-avantgar< 2:svn28614.0-45.el7
texlive-babel< 2:svn24756.3.8m-45.el7
texlive-babel-doc< 2:svn24756.3.8m-45.el7
texlive-babelbib< 2:svn25245.1.31-45.el7
texlive-babelbib-doc< 2:svn25245.1.31-45.el7
texlive-base< 2:2012-45.20130427_r30134.el7
texlive-beamer< 2:svn29349.3.26-45.el7
texlive-beamer-doc< 2:svn29349.3.26-45.el7
texlive-bera< 2:svn20031.0-45.el7
texlive-bera-doc< 2:svn20031.0-45.el7
texlive-beton< 2:svn15878.0-45.el7
texlive-beton-doc< 2:svn15878.0-45.el7
texlive-bibtex< 2:svn26689.0.99d-45.el7
texlive-bibtex-bin< 2:svn26509.0-45.20130427_r30134.el7
texlive-bibtex-doc< 2:svn26689.0.99d-45.el7
texlive-bibtopic< 2:svn15878.1.1a-45.el7
texlive-bibtopic-doc< 2:svn15878.1.1a-45.el7
texlive-bidi< 2:svn29650.12.2-45.el7
texlive-bidi-doc< 2:svn29650.12.2-45.el7
texlive-bigfoot< 2:svn15878.0-45.el7
texlive-bigfoot-doc< 2:svn15878.0-45.el7
texlive-bookman< 2:svn28614.0-45.el7
texlive-booktabs< 2:svn15878.1.61803-45.el7
texlive-booktabs-doc< 2:svn15878.1.61803-45.el7
texlive-breakurl< 2:svn15878.1.30-45.el7
texlive-breakurl-doc< 2:svn15878.1.30-45.el7
texlive-caption< 2:svn29026.3.3__2013_02_03_-45.el7
texlive-caption-doc< 2:svn29026.3.3__2013_02_03_-45.el7
texlive-carlisle< 2:svn18258.0-45.el7
texlive-carlisle-doc< 2:svn18258.0-45.el7
texlive-changebar< 2:svn29349.3.5c-45.el7
texlive-changebar-doc< 2:svn29349.3.5c-45.el7
texlive-changepage< 2:svn15878.1.0c-45.el7
texlive-changepage-doc< 2:svn15878.1.0c-45.el7
texlive-charter< 2:svn15878.0-45.el7
texlive-charter-doc< 2:svn15878.0-45.el7
texlive-chngcntr< 2:svn17157.1.0a-45.el7
texlive-chngcntr-doc< 2:svn17157.1.0a-45.el7
texlive-cite< 2:svn19955.5.3-45.el7
texlive-cite-doc< 2:svn19955.5.3-45.el7
texlive-cjk< 2:svn26296.4.8.3-45.el7
texlive-cjk-doc< 2:svn26296.4.8.3-45.el7
texlive-cm< 2:svn29581.0-45.el7
texlive-cm-doc< 2:svn29581.0-45.el7
texlive-cm-lgc< 2:svn28250.0.5-45.el7
texlive-cm-lgc-doc< 2:svn28250.0.5-45.el7
texlive-cm-super< 2:svn15878.0-45.el7
texlive-cm-super-doc< 2:svn15878.0-45.el7
texlive-cmap< 2:svn26568.0-45.el7
texlive-cmap-doc< 2:svn26568.0-45.el7
texlive-cmextra< 2:svn14075.0-45.el7
texlive-cns< 2:svn15878.0-45.el7
texlive-cns-doc< 2:svn15878.0-45.el7
texlive-collectbox< 2:svn26557.0-45.el7
texlive-collectbox-doc< 2:svn26557.0-45.el7
texlive-collection-basic< 2:svn26314.0-45.20130427_r30134.el7
texlive-collection-documentation-base< 2:svn17091.0-45.20130427_r30134.el7
texlive-collection-fontsrecommended< 2:svn28082.0-45.20130427_r30134.el7
texlive-collection-htmlxml< 2:svn28251.0-45.20130427_r30134.el7
texlive-collection-latex< 2:svn25030.0-45.20130427_r30134.el7
texlive-collection-latexrecommended< 2:svn25795.0-45.20130427_r30134.el7
texlive-collection-xetex< 2:svn29634.0-45.20130427_r30134.el7
texlive-colortbl< 2:svn25394.v1.0a-45.el7
texlive-colortbl-doc< 2:svn25394.v1.0a-45.el7
texlive-courier< 2:svn28614.0-45.el7
texlive-crop< 2:svn15878.1.5-45.el7
texlive-crop-doc< 2:svn15878.1.5-45.el7
texlive-csquotes< 2:svn24393.5.1d-45.el7
texlive-csquotes-doc< 2:svn24393.5.1d-45.el7
texlive-ctable< 2:svn26694.1.23-45.el7
texlive-ctable-doc< 2:svn26694.1.23-45.el7
texlive-currfile< 2:svn29012.0.7b-45.el7
texlive-currfile-doc< 2:svn29012.0.7b-45.el7
texlive-datetime< 2:svn19834.2.58-45.el7
texlive-datetime-doc< 2:svn19834.2.58-45.el7
texlive-debuginfo< 2:2012-45.20130427_r30134.el7
texlive-dvipdfm< 2:svn26689.0.13.2d-45.el7
texlive-dvipdfm-bin< 2:svn13663.0-45.20130427_r30134.el7
texlive-dvipdfm-doc< 2:svn26689.0.13.2d-45.el7
texlive-dvipdfmx< 2:svn26765.0-45.el7
texlive-dvipdfmx-bin< 2:svn26509.0-45.20130427_r30134.el7
texlive-dvipdfmx-def< 2:svn15878.0-45.el7
texlive-dvipdfmx-doc< 2:svn26765.0-45.el7
texlive-dvipng< 2:svn26689.1.14-45.el7
texlive-dvipng-bin< 2:svn26509.0-45.20130427_r30134.el7
texlive-dvipng-doc< 2:svn26689.1.14-45.el7
texlive-dvips< 2:svn29585.0-45.el7
texlive-dvips-bin< 2:svn26509.0-45.20130427_r30134.el7
texlive-dvips-doc< 2:svn29585.0-45.el7
texlive-ec< 2:svn25033.1.0-45.el7
texlive-ec-doc< 2:svn25033.1.0-45.el7
texlive-eepic< 2:svn15878.1.1e-45.el7
texlive-eepic-doc< 2:svn15878.1.1e-45.el7
texlive-enctex< 2:svn28602.0-45.el7
texlive-enctex-doc< 2:svn28602.0-45.el7
texlive-enumitem< 2:svn24146.3.5.2-45.el7
texlive-enumitem-doc< 2:svn24146.3.5.2-45.el7
texlive-epsf< 2:svn21461.2.7.4-45.el7
texlive-epsf-doc< 2:svn21461.2.7.4-45.el7
texlive-epstopdf< 2:svn26577.0-45.el7
texlive-epstopdf-bin< 2:svn18336.0-45.20130427_r30134.el7
texlive-epstopdf-doc< 2:svn26577.0-45.el7
texlive-eso-pic< 2:svn21515.2.0c-45.el7
texlive-eso-pic-doc< 2:svn21515.2.0c-45.el7
texlive-etex< 2:svn22198.2.1-45.el7
texlive-etex-doc< 2:svn22198.2.1-45.el7
texlive-etex-pkg< 2:svn15878.2.0-45.el7
texlive-etex-pkg-doc< 2:svn15878.2.0-45.el7
texlive-etoolbox< 2:svn20922.2.1-45.el7
texlive-etoolbox-doc< 2:svn20922.2.1-45.el7
texlive-euenc< 2:svn19795.0.1h-45.el7
texlive-euenc-doc< 2:svn19795.0.1h-45.el7
texlive-euler< 2:svn17261.2.5-45.el7
texlive-euler-doc< 2:svn17261.2.5-45.el7
texlive-euro< 2:svn22191.1.1-45.el7
texlive-euro-doc< 2:svn22191.1.1-45.el7
texlive-eurosym< 2:svn17265.1.4_subrfix-45.el7
texlive-eurosym-doc< 2:svn17265.1.4_subrfix-45.el7
texlive-extsizes< 2:svn17263.1.4a-45.el7
texlive-extsizes-doc< 2:svn17263.1.4a-45.el7
texlive-fancybox< 2:svn18304.1.4-45.el7
texlive-fancybox-doc< 2:svn18304.1.4-45.el7
texlive-fancyhdr< 2:svn15878.3.1-45.el7
texlive-fancyhdr-doc< 2:svn15878.3.1-45.el7
texlive-fancyref< 2:svn15878.0.9c-45.el7
texlive-fancyref-doc< 2:svn15878.0.9c-45.el7
texlive-fancyvrb< 2:svn18492.2.8-45.el7
texlive-fancyvrb-doc< 2:svn18492.2.8-45.el7
texlive-filecontents< 2:svn24250.1.3-45.el7
texlive-filecontents-doc< 2:svn24250.1.3-45.el7
texlive-filehook< 2:svn24280.0.5d-45.el7
texlive-filehook-doc< 2:svn24280.0.5d-45.el7
texlive-fix2col< 2:svn17133.0-45.el7
texlive-fix2col-doc< 2:svn17133.0-45.el7
texlive-fixlatvian< 2:svn21631.1a-45.el7
texlive-fixlatvian-doc< 2:svn21631.1a-45.el7
texlive-float< 2:svn15878.1.3d-45.el7
texlive-float-doc< 2:svn15878.1.3d-45.el7
texlive-fmtcount< 2:svn28068.2.02-45.el7
texlive-fmtcount-doc< 2:svn28068.2.02-45.el7
texlive-fncychap< 2:svn20710.v1.34-45.el7
texlive-fncychap-doc< 2:svn20710.v1.34-45.el7
texlive-fontbook< 2:svn23608.0.2-45.el7
texlive-fontbook-doc< 2:svn23608.0.2-45.el7
texlive-fontspec< 2:svn29412.v2.3a-45.el7
texlive-fontspec-doc< 2:svn29412.v2.3a-45.el7
texlive-fontware< 2:svn26689.0-45.el7
texlive-fontware-bin< 2:svn26509.0-45.20130427_r30134.el7
texlive-fontwrap< 2:svn15878.0-45.el7
texlive-fontwrap-doc< 2:svn15878.0-45.el7
texlive-footmisc< 2:svn23330.5.5b-45.el7
texlive-footmisc-doc< 2:svn23330.5.5b-45.el7
texlive-fp< 2:svn15878.0-45.el7
texlive-fp-doc< 2:svn15878.0-45.el7
texlive-fpl< 2:svn15878.1.002-45.el7
texlive-fpl-doc< 2:svn15878.1.002-45.el7
texlive-framed< 2:svn26789.0.96-45.el7
texlive-framed-doc< 2:svn26789.0.96-45.el7
texlive-garuda-c90< 2:svn15878.0-45.el7
texlive-geometry< 2:svn19716.5.6-45.el7
texlive-geometry-doc< 2:svn19716.5.6-45.el7
texlive-glyphlist< 2:svn28576.0-45.el7
texlive-graphics< 2:svn25405.1.0o-45.el7
texlive-graphics-doc< 2:svn25405.1.0o-45.el7
texlive-gsftopk< 2:svn26689.1.19.2-45.el7
texlive-gsftopk-bin< 2:svn26509.0-45.20130427_r30134.el7
texlive-helvetic< 2:svn28614.0-45.el7
texlive-hyperref< 2:svn28213.6.83m-45.el7
texlive-hyperref-doc< 2:svn28213.6.83m-45.el7
texlive-hyph-utf8< 2:svn29641.0-45.el7
texlive-hyph-utf8-doc< 2:svn29641.0-45.el7
texlive-hyphen-base< 2:svn29197.0-45.el7

Show all 195

Debian2 products

texlive-bin< 2018.20180907.48586-2 | < 2016.20160513.41080.dfsg-2+deb9u1 | < 2014.20140926.35254-6+deb8u1
debian_linuxEOL8.0 | 9.0

Canonical1 product

ubuntu_linuxEOL14.04 | 16.04 | 18.04 | 18.10

Mageia1 product

texlive< 20160523-7.1.mga6

Ubuntu1 product

texlive-bin< 2013.20130729.30972-2ubuntu0.1 | < 2015.20160222.37495-1ubuntu0.1 | < 2017.20170613.44572-8ubuntu0.1

5 vendors · 200 products · Showing 200 of 568. Use Open JSON for the complete list.

References

26 links

github.com/TeX-Live/texlive-source/commit/6ed0077520e2b0da1fd060c7f88db7b2e6068e4cX Refsource MISCPatchThird Party AdvisoryREPORT
www.debian.org/security/2018/dsa-4299Vendor AdvisoryX Refsource DEBIANThird Party Advisory
lists.debian.org/debian-security-announce/2018/msg00230.htmlX Refsource MISCMailing ListThird Party AdvisoryREPORT
usn.ubuntu.com/3788-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
usn.ubuntu.com/3788-2/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
advisories.mageia.org/MGASA-2018-0397.htmlAdvisory
bugs.mageia.org/show_bug.cgi?id=23655REPORT
www.openwall.com/lists/oss-security/2018/10/08/3WEB
www.suse.com/support/update/announcement/2018/suse-su-20183033-1/Advisory
bugzilla.suse.com/1109673REPORT

Show all 26 references

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities