Memory corruption in MuPDF - CVE-2018-6192

Vulnerability identifier: #VU12560

CSH Severity: Low

CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-6192

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the traget system.

The weakness exists the pdf_read_new_xref function in pdf/pdf-xref.c due to segmentation violation. A remote attacker can trick the victim into opening a specially crafted pdf file, trigger memory corruption and cause the service to crash.

MuPDF
Arch Linux
Debian Linux
Fedora
mupdf (Alpine package)
mupdf

Install update from vendor's website.

mupdf (Alpine package) - update to 1.13.0-r0
mupdf - update to 1.12.0-5.fc27

• https://bugs.ghostscript.com/show_bug.cgi?id=698916

• Arch Linux update for mupdf
• Arch Linux update for mupdf-gl
• Arch Linux update for libmupdf
• Arch Linux update for mupdf-tools
• Arch Linux update for llpp
• Arch Linux update for zathura-pdf-mupdf
• Debian update for mupdf
• Memory corruption in mupdf (Alpine package)
• Fedora 27 update for mupdf