* okular: Directory traversal in function unpackDocumentArchive() in core/document.cpp

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has okular packages installed that are affected by a vulnerability:

  - okular version 18.08 and earlier contains a Directory Traversal vulnerability in function     unpackDocumentArchive(...) in core/document.cpp that can result in Arbitrary file creation on the user     workstation. This attack appear to be exploitable via he victim must open a specially crafted Okular     archive. This issue appears to have been corrected in version 18.08.1 (CVE-2018-1000801)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Joran Herve discovered that the Okular document viewer was susceptible to directory traversal via malformed .okular files (annotated document archives), which could result in the creation of arbitrary files.

For Debian 8 'Jessie', this problem has been fixed in version 4:4.14.2-2+deb8u1.

We recommend that you upgrade your okular packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Joran Herve discovered that the Okular document viewer was susceptible to directory traversal via malformed .okular files (annotated document archives), which could result in the creation of arbitrary files.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1173 advisory.

    Okular is a universal document viewer developed by KDE supporting different kinds of documents, like PDF,     Postscript, DjVu, CHM, XPS, ePub and others.

    Security Fix(es):

    * okular: Directory traversal in function unpackDocumentArchive() in core/document.cpp (CVE-2018-1000801)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.8 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1173 advisory.

  - okular version 18.08 and earlier contains a Directory Traversal vulnerability in function     unpackDocumentArchive(...) in core/document.cpp that can result in Arbitrary file creation on the user     workstation. This attack appear to be exploitable via he victim must open a specially crafted Okular     archive. This issue appears to have been corrected in version 18.08.1 (CVE-2018-1000801)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
135826	Scientific Linux Security Update : okular on SL7.x x86_64 (20200407)	Nessus	Scientific Linux Local Security Checks	2020/4/21	2024/3/15	medium
143956	NewStart CGSL CORE 5.04 / MAIN 5.04 : okular Vulnerability (NS-SA-2020-0076)	Nessus	NewStart CGSL Local Security Checks	2020/12/9	2024/2/5	medium
117643	Debian DLA-1516-1 : okular security update	Nessus	Debian Local Security Checks	2018/9/24	2024/8/6	medium
117676	Debian DSA-4303-1 : okular - security update	Nessus	Debian Local Security Checks	2018/9/25	2024/8/5	medium
135057	RHEL 7 : okular (RHSA-2020:1173)	Nessus	Red Hat Local Security Checks	2020/4/1	2024/11/7	medium
135350	CentOS 7 : okular (RHSA-2020:1173)	Nessus	CentOS Local Security Checks	2020/4/10	2024/10/9	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium