UBUNTU-CVE-2018-25306
- Source
- https://ubuntu.com/security/CVE-2018-25306
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-25306.json
- JSON Data
- https://api.osv.dev/v1/vulns/UBUNTU-CVE-2018-25306
- Upstream
- Published
- 2026-04-29T20:16:00Z
- Modified
- 2026-05-14T11:10:00Z
- Severity
-
- 6.2 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- 6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
- Ubuntu - medium
- Summary
- [none]
- Details
-
PDFunite 0.41.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by processing malformed PDF files during merge operations. Attackers can trigger a segmentation fault in the XRef::getEntry function within libpoppler by providing a specially crafted PDF file to the pdfunite utility.
- References
Affected packages
Ubuntu:Pro:16.04:LTS / poppler
Package
- Name
- poppler
- Purl
- pkg:deb/ubuntu/poppler@0.41.0-0ubuntu1.16+esm8?arch=source&distro=esm-infra/xenial
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
0.*
0.33.0-0ubuntu3
0.37.0-0ubuntu1
0.38.0-0ubuntu1
0.41.0-0ubuntu1
0.41.0-0ubuntu1.1
0.41.0-0ubuntu1.2
0.41.0-0ubuntu1.3
0.41.0-0ubuntu1.4
0.41.0-0ubuntu1.5
0.41.0-0ubuntu1.6
0.41.0-0ubuntu1.7
0.41.0-0ubuntu1.8
0.41.0-0ubuntu1.9
0.41.0-0ubuntu1.10
0.41.0-0ubuntu1.11
0.41.0-0ubuntu1.12
0.41.0-0ubuntu1.13
0.41.0-0ubuntu1.14
0.41.0-0ubuntu1.15
0.41.0-0ubuntu1.16
0.41.0-0ubuntu1.16+esm1
0.41.0-0ubuntu1.16+esm2
0.41.0-0ubuntu1.16+esm3
0.41.0-0ubuntu1.16+esm4
0.41.0-0ubuntu1.16+esm5
0.41.0-0ubuntu1.16+esm6
0.41.0-0ubuntu1.16+esm7
0.41.0-0ubuntu1.16+esm8
Ecosystem specific
{
"binaries": [
{
"binary_name": "gir1.2-poppler-0.18",
"binary_version": "0.41.0-0ubuntu1.16+esm8"
},
{
"binary_name": "libpoppler-cpp0",
"binary_version": "0.41.0-0ubuntu1.16+esm8"
},
{
"binary_name": "libpoppler-glib8",
"binary_version": "0.41.0-0ubuntu1.16+esm8"
},
{
"binary_name": "libpoppler-qt4-4",
"binary_version": "0.41.0-0ubuntu1.16+esm8"
},
{
"binary_name": "libpoppler-qt5-1",
"binary_version": "0.41.0-0ubuntu1.16+esm8"
},
{
"binary_name": "libpoppler58",
"binary_version": "0.41.0-0ubuntu1.16+esm8"
},
{
"binary_name": "poppler-utils",
"binary_version": "0.41.0-0ubuntu1.16+esm8"
}
]
}
Ubuntu:Pro:18.04:LTS / poppler
Package
- Name
- poppler
- Purl
- pkg:deb/ubuntu/poppler@0.62.0-2ubuntu2.14+esm8?arch=source&distro=esm-infra/bionic
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
0.*
0.57.0-2ubuntu4
0.57.0-2ubuntu5
0.62.0-1ubuntu1
0.62.0-2ubuntu1
0.62.0-2ubuntu2
0.62.0-2ubuntu2.1
0.62.0-2ubuntu2.2
0.62.0-2ubuntu2.4
0.62.0-2ubuntu2.5
0.62.0-2ubuntu2.6
0.62.0-2ubuntu2.7
0.62.0-2ubuntu2.8
0.62.0-2ubuntu2.9
0.62.0-2ubuntu2.10
0.62.0-2ubuntu2.11
0.62.0-2ubuntu2.12
0.62.0-2ubuntu2.13
0.62.0-2ubuntu2.14
0.62.0-2ubuntu2.14+esm1
0.62.0-2ubuntu2.14+esm2
0.62.0-2ubuntu2.14+esm3
0.62.0-2ubuntu2.14+esm4
0.62.0-2ubuntu2.14+esm5
0.62.0-2ubuntu2.14+esm6
0.62.0-2ubuntu2.14+esm7
0.62.0-2ubuntu2.14+esm8
Ecosystem specific
{
"binaries": [
{
"binary_name": "gir1.2-poppler-0.18",
"binary_version": "0.62.0-2ubuntu2.14+esm8"
},
{
"binary_name": "libpoppler-cpp0v5",
"binary_version": "0.62.0-2ubuntu2.14+esm8"
},
{
"binary_name": "libpoppler-glib8",
"binary_version": "0.62.0-2ubuntu2.14+esm8"
},
{
"binary_name": "libpoppler-qt5-1",
"binary_version": "0.62.0-2ubuntu2.14+esm8"
},
{
"binary_name": "libpoppler73",
"binary_version": "0.62.0-2ubuntu2.14+esm8"
},
{
"binary_name": "poppler-utils",
"binary_version": "0.62.0-2ubuntu2.14+esm8"
}
]
}
Ubuntu:Pro:20.04:LTS / poppler
Package
- Name
- poppler
- Purl
- pkg:deb/ubuntu/poppler@0.86.1-0ubuntu1.7+esm3?arch=source&distro=esm-infra/focal
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
0.*
0.80.0-0ubuntu1
0.80.0-0ubuntu3
0.80.0-0ubuntu4
0.80.0-0ubuntu5
0.85.0-1ubuntu1
0.85.0-1ubuntu3
0.86.1-0ubuntu1
0.86.1-0ubuntu1.1
0.86.1-0ubuntu1.2
0.86.1-0ubuntu1.3
0.86.1-0ubuntu1.4
0.86.1-0ubuntu1.5
0.86.1-0ubuntu1.6
0.86.1-0ubuntu1.7
0.86.1-0ubuntu1.7+esm1
0.86.1-0ubuntu1.7+esm2
0.86.1-0ubuntu1.7+esm3
Ecosystem specific
{
"binaries": [
{
"binary_name": "gir1.2-poppler-0.18",
"binary_version": "0.86.1-0ubuntu1.7+esm3"
},
{
"binary_name": "libpoppler-cpp0v5",
"binary_version": "0.86.1-0ubuntu1.7+esm3"
},
{
"binary_name": "libpoppler-glib8",
"binary_version": "0.86.1-0ubuntu1.7+esm3"
},
{
"binary_name": "libpoppler-qt5-1",
"binary_version": "0.86.1-0ubuntu1.7+esm3"
},
{
"binary_name": "libpoppler97",
"binary_version": "0.86.1-0ubuntu1.7+esm3"
},
{
"binary_name": "poppler-utils",
"binary_version": "0.86.1-0ubuntu1.7+esm3"
}
]
}