Home > Vulnerability Database > CVE-2018-19777

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2018-19777

Date: November 30, 2018

In Artifex MuPDF 1.14.0, there is an infinite loop in the function svg_dev_end_tile in fitz/svg-device.c, as demonstrated by mutool.

Language: C

Severity Score

3.7

Related Resources (6)

Url: https://bugs.ghostscript.com/show_bug.cgi?id=700301

Url: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUXKCY35PKC32IFHN4RBUCZ75OWEYVJH/

Url: https://security-tracker.debian.org/tracker/CVE-2018-19777

Url: http://www.ghostscript.com/cgi-bin/findgit.cgi?754ac68f119e0c25cd33c5d652d8aabd533a9fb3

Url: https://nvd.nist.gov/vuln/detail/CVE-2018-19777

Url: https://www.mend.io/vulnerability-database/CVE-2018-19777

Severity Score

3.7

Weakness Type (CWE)

Uncontrolled Resource Consumption

CWE-400

Loop with Unreachable Exit Condition ('Infinite Loop')

CWE-835

CVSS v3.1

Base Score:	3.7
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	LOW

CVSS v2

Base Score:	4.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	PARTIAL
Additional information:

Do you need more information?

Contact Us