Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 646010 (CVE-2017-17858, CVE-2018-5686, CVE-2018-6187, CVE-2018-6192) - <app-text/mupdf-1.13.0: Multiple vulnerabilities
Summary: <app-text/mupdf-1.13.0: Multiple vulnerabilities
Alias: CVE-2017-17858, CVE-2018-5686, CVE-2018-6187, CVE-2018-6192
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal minor (vote)
Assignee: Gentoo Security
Whiteboard: B3 [glsa+ cve]
Depends on: 658618
  Show dependency tree
Reported: 2018-01-29 00:09 UTC by GLSAMaker/CVETool Bot
Modified: 2018-11-26 18:35 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Note You need to log in before you can comment on or make changes to this bug.
Description GLSAMaker/CVETool Bot gentoo-dev 2018-01-29 00:09:06 UTC
CVE-2018-6192 (
  In Artifex MuPDF 1.12.0, the pdf_read_new_xref function in pdf/pdf-xref.c
  allows remote attackers to cause a denial of service (segmentation violation
  and application crash) via a crafted pdf file.

CVE-2018-6187 (
  In Artifex MuPDF 1.12.0, there is a heap-based buffer overflow vulnerability
  in the do_pdf_save_document function in the pdf/pdf-write.c file. Remote
  attackers could leverage the vulnerability to cause a denial of service via
  a crafted pdf file.

CVE-2018-5686 (
  In MuPDF 1.12.0, there is an infinite loop vulnerability and application
  hang in the pdf_parse_array function (pdf/pdf-parse.c) because EOF is not
  considered. Remote attackers could leverage this vulnerability to cause a
  denial of service via a crafted pdf file.

CVE-2017-17858 (
  Heap-based buffer overflow in the ensure_solid_xref function in
  pdf/pdf-xref.c in Artifex MuPDF 1.12.0 allows a remote attacker to
  potentially execute arbitrary code via a crafted PDF file, because xref
  subsection object numbers are unrestricted.
Comment 1 Larry the Git Cow gentoo-dev 2018-07-25 01:33:29 UTC
The bug has been referenced in the following commit(s):

commit 856a6ad1fd3dfe1ab67a2976edc3f5dedd694fa3
Author:     Jouni Kosonen <>
AuthorDate: 2018-06-27 07:03:42 +0000
Commit:     Virgil Dupras <>
CommitDate: 2018-07-25 01:31:14 +0000

    app-text/mupdf: version bump to 1.13.0

 app-text/mupdf/Manifest                            |   1 +
 .../mupdf/files/mupdf-1.13-openssl-curl-x11.patch  |  39 +++++
 app-text/mupdf/mupdf-1.13.0.ebuild                 | 166 +++++++++++++++++++++
 3 files changed, 206 insertions(+)
Comment 2 Virgil Dupras (RETIRED) gentoo-dev 2018-08-18 21:08:37 UTC
Syncing whiteboard status with bug 658618
Comment 3 Aaron Bauman (RETIRED) gentoo-dev 2018-11-24 21:58:18 UTC
added to GLSA.
Comment 4 GLSAMaker/CVETool Bot gentoo-dev 2018-11-26 18:35:02 UTC
This issue was resolved and addressed in
 GLSA 201811-15 at
by GLSA coordinator Aaron Bauman (b-man).