SUSE-SU-2018:3066-2: cups-filters&distro=SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise

CVSS: UnknownPublished
Published 18-10-2018Last modified 04-02-2026
Open JSON

Vulnerability summary

SUSE-SU-2018:3066-2 is a vulnerability in cups-filters&distro=SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 8 · Downstream 0 · Related 8
CVE-2017-11624CVE-2017-11625CVE-2017-11626CVE-2017-11627CVE-2017-12595CVE-2017-9208

Timeline

  1. 18-10-2018
    PublishedVulnerability first disclosed.
  2. 04-02-2026
    Last modifiedVulnerability information updated.

Description

Security update for qpdf This update for qpdf fixes the following issues: qpdf was updated to 7.1.1. Security issues fixed: - CVE-2017-11627: A stack-consumption vulnerability which allows attackers to cause DoS (bsc#1050577). - CVE-2017-11625: A stack-consumption vulnerability which allows attackers to cause DoS (bsc#1050579). - CVE-2017-11626: A stack-consumption vulnerability which allows attackers to cause DoS (bsc#1050578). - CVE-2017-11624: A stack-consumption vulnerability which allows attackers to cause DoS (bsc#1050581). - CVE-2017-12595: Stack overflow when processing deeply nested arrays and dictionaries (bsc#1055960). - CVE-2017-9209: Remote attackers can cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document (bsc#1040312). - CVE-2017-9210: Remote attackers can cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document (bsc#1040313). - CVE-2017-9208: Remote attackers can cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document (bsc#1040311). * Check release notes for detailed bug fixes. * http://qpdf.sourceforge.net/files/qpdf-manual.html#ref.release-notes

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse2 products
  • cups-filters&distro=SUSE Linux Enterprise Server 12 SP2-BCL< 1.0.58-15.2.1
  • qpdf&distro=SUSE Linux Enterprise Server 12 SP2-BCL< 7.1.1-3.3.4

1 vendor · 2 products

References

17 links
Show all 17 references