Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2020-9359 (GCVE-0-2020-9359)
Vulnerability from cvelistv5 – Published: 2020-03-24 13:29 – Updated: 2024-08-04 10:26
VLAI?
EPSS
Summary
KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T10:26:16.102Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "FEDORA-2020-7036f54316",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2TY3O6UWX2XTP7PISPTZ6FYRDFU4UF66/"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://invent.kde.org/kde/okular/-/commit/6a93a033b4f9248b3cd4d04689b8391df754e244"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://kde.org/info/security/advisory-20200312-1.txt"
},
{
"name": "[debian-lts-announce] 20200325 [SECURITY] [DLA 2159-1] okular security update",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00033.html"
},
{
"name": "FEDORA-2020-dcde488e68",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AW6GJ3AKGXOMTDHNZBMSXDTWNJJRFBDH/"
},
{
"name": "FEDORA-2020-e35573f7df",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G3HL3F6JLCSRLPFZ47735F5STPJWDVR4/"
},
{
"name": "GLSA-202007-47",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/202007-47"
},
{
"name": "[debian-lts-announce] 20211227 [SECURITY] [DLA 2856-1] okular security update",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00019.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "KDE Okular before 1.10.0 allows code execution via an action link in a PDF document."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-12-27T22:06:05.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "FEDORA-2020-7036f54316",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2TY3O6UWX2XTP7PISPTZ6FYRDFU4UF66/"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://invent.kde.org/kde/okular/-/commit/6a93a033b4f9248b3cd4d04689b8391df754e244"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://kde.org/info/security/advisory-20200312-1.txt"
},
{
"name": "[debian-lts-announce] 20200325 [SECURITY] [DLA 2159-1] okular security update",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00033.html"
},
{
"name": "FEDORA-2020-dcde488e68",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AW6GJ3AKGXOMTDHNZBMSXDTWNJJRFBDH/"
},
{
"name": "FEDORA-2020-e35573f7df",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G3HL3F6JLCSRLPFZ47735F5STPJWDVR4/"
},
{
"name": "GLSA-202007-47",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/202007-47"
},
{
"name": "[debian-lts-announce] 20211227 [SECURITY] [DLA 2856-1] okular security update",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00019.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-9359",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "KDE Okular before 1.10.0 allows code execution via an action link in a PDF document."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "FEDORA-2020-7036f54316",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2TY3O6UWX2XTP7PISPTZ6FYRDFU4UF66/"
},
{
"name": "https://invent.kde.org/kde/okular/-/commit/6a93a033b4f9248b3cd4d04689b8391df754e244",
"refsource": "CONFIRM",
"url": "https://invent.kde.org/kde/okular/-/commit/6a93a033b4f9248b3cd4d04689b8391df754e244"
},
{
"name": "https://kde.org/info/security/advisory-20200312-1.txt",
"refsource": "CONFIRM",
"url": "https://kde.org/info/security/advisory-20200312-1.txt"
},
{
"name": "[debian-lts-announce] 20200325 [SECURITY] [DLA 2159-1] okular security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00033.html"
},
{
"name": "FEDORA-2020-dcde488e68",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AW6GJ3AKGXOMTDHNZBMSXDTWNJJRFBDH/"
},
{
"name": "FEDORA-2020-e35573f7df",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G3HL3F6JLCSRLPFZ47735F5STPJWDVR4/"
},
{
"name": "GLSA-202007-47",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/202007-47"
},
{
"name": "[debian-lts-announce] 20211227 [SECURITY] [DLA 2856-1] okular security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00019.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2020-9359",
"datePublished": "2020-03-24T13:29:03.000Z",
"dateReserved": "2020-02-24T00:00:00.000Z",
"dateUpdated": "2024-08-04T10:26:16.102Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:kde:okular:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"1.10.0\", \"matchCriteriaId\": \"19DDD8EA-D428-48D0-8B88-E72F66FFB3FB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:kde:okular:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"19.12.0\", \"versionEndExcluding\": \"19.12.3\", \"matchCriteriaId\": \"9D538A11-BA16-4E68-AEE4-88FBA1EABBD1\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"80F0FA5D-8D3B-4C0E-81E2-87998286AF33\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"36D96259-24BD-44E2-96D9-78CE1D41F956\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.\"}, {\"lang\": \"es\", \"value\": \"KDE Okular versiones anteriores a la versi\\u00f3n 1.10.0, permite una ejecuci\\u00f3n de c\\u00f3digo por medio de un enlace de acci\\u00f3n en un documento PDF.\"}]",
"id": "CVE-2020-9359",
"lastModified": "2024-11-21T05:40:28.707",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L\", \"baseScore\": 5.3, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"LOW\", \"integrityImpact\": \"LOW\", \"availabilityImpact\": \"LOW\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 3.4}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:P/I:P/A:P\", \"baseScore\": 6.8, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.6, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
"published": "2020-03-24T14:15:13.577",
"references": "[{\"url\": \"https://invent.kde.org/kde/okular/-/commit/6a93a033b4f9248b3cd4d04689b8391df754e244\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"https://kde.org/info/security/advisory-20200312-1.txt\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2020/03/msg00033.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2021/12/msg00019.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2TY3O6UWX2XTP7PISPTZ6FYRDFU4UF66/\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AW6GJ3AKGXOMTDHNZBMSXDTWNJJRFBDH/\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G3HL3F6JLCSRLPFZ47735F5STPJWDVR4/\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://security.gentoo.org/glsa/202007-47\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://invent.kde.org/kde/okular/-/commit/6a93a033b4f9248b3cd4d04689b8391df754e244\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"https://kde.org/info/security/advisory-20200312-1.txt\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2020/03/msg00033.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2021/12/msg00019.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2TY3O6UWX2XTP7PISPTZ6FYRDFU4UF66/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AW6GJ3AKGXOMTDHNZBMSXDTWNJJRFBDH/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G3HL3F6JLCSRLPFZ47735F5STPJWDVR4/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://security.gentoo.org/glsa/202007-47\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2020-9359\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2020-03-24T14:15:13.577\",\"lastModified\":\"2024-11-21T05:40:28.707\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.\"},{\"lang\":\"es\",\"value\":\"KDE Okular versiones anteriores a la versi\u00f3n 1.10.0, permite una ejecuci\u00f3n de c\u00f3digo por medio de un enlace de acci\u00f3n en un documento PDF.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L\",\"baseScore\":5.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":1.8,\"impactScore\":3.4}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:P/A:P\",\"baseScore\":6.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:kde:okular:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.10.0\",\"matchCriteriaId\":\"19DDD8EA-D428-48D0-8B88-E72F66FFB3FB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:kde:okular:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"19.12.0\",\"versionEndExcluding\":\"19.12.3\",\"matchCriteriaId\":\"9D538A11-BA16-4E68-AEE4-88FBA1EABBD1\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80F0FA5D-8D3B-4C0E-81E2-87998286AF33\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36D96259-24BD-44E2-96D9-78CE1D41F956\"}]}]}],\"references\":[{\"url\":\"https://invent.kde.org/kde/okular/-/commit/6a93a033b4f9248b3cd4d04689b8391df754e244\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://kde.org/info/security/advisory-20200312-1.txt\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2020/03/msg00033.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2021/12/msg00019.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2TY3O6UWX2XTP7PISPTZ6FYRDFU4UF66/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AW6GJ3AKGXOMTDHNZBMSXDTWNJJRFBDH/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G3HL3F6JLCSRLPFZ47735F5STPJWDVR4/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://security.gentoo.org/glsa/202007-47\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://invent.kde.org/kde/okular/-/commit/6a93a033b4f9248b3cd4d04689b8391df754e244\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://kde.org/info/security/advisory-20200312-1.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2020/03/msg00033.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2021/12/msg00019.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2TY3O6UWX2XTP7PISPTZ6FYRDFU4UF66/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AW6GJ3AKGXOMTDHNZBMSXDTWNJJRFBDH/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G3HL3F6JLCSRLPFZ47735F5STPJWDVR4/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/202007-47\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}"
}
}
CNVD-2020-23208
Vulnerability from cnvd - Published: 2020-04-17
VLAI Severity ?
Title
KDE Okular输入验证错误漏洞
Description
KDE Okular是KDE社区的一款开源的通用文档查看器。
KDE Okular 1.10.0之前版本中存在输入验证错误漏洞,攻击者可借助特制的PDF文件利用该漏洞在系统上执行任意代码。
Severity
中
Patch Name
KDE Okular输入验证错误漏洞的补丁
Patch Description
KDE Okular是KDE社区的一款开源的通用文档查看器。
KDE Okular 1.10.0之前版本中存在输入验证错误漏洞,攻击者可借助特制的PDF文件利用该漏洞在系统上执行任意代码。目前,供应商发布了安全公告及相关补丁信息,修复了此漏洞。
Formal description
厂商已发布了漏洞修复程序,请及时关注更新: https://kde.org/info/security/advisory-20200312-1.txt
Reference
https://nvd.nist.gov/vuln/detail/CVE-2020-9359
Impacted products
| Name | KDE okular <1.10.0 |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2020-9359"
}
},
"description": "KDE Okular\u662fKDE\u793e\u533a\u7684\u4e00\u6b3e\u5f00\u6e90\u7684\u901a\u7528\u6587\u6863\u67e5\u770b\u5668\u3002\n\nKDE Okular 1.10.0\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u501f\u52a9\u7279\u5236\u7684PDF\u6587\u4ef6\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002",
"formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://kde.org/info/security/advisory-20200312-1.txt",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2020-23208",
"openTime": "2020-04-17",
"patchDescription": "KDE Okular\u662fKDE\u793e\u533a\u7684\u4e00\u6b3e\u5f00\u6e90\u7684\u901a\u7528\u6587\u6863\u67e5\u770b\u5668\u3002\r\n\r\nKDE Okular 1.10.0\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u501f\u52a9\u7279\u5236\u7684PDF\u6587\u4ef6\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "KDE Okular\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\u7684\u8865\u4e01",
"products": {
"product": "KDE okular \u003c1.10.0"
},
"referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2020-9359",
"serverity": "\u4e2d",
"submitTime": "2020-03-25",
"title": "KDE Okular\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e"
}
FKIE_CVE-2020-9359
Vulnerability from fkie_nvd - Published: 2020-03-24 14:15 - Updated: 2024-11-21 05:40
Severity ?
Summary
KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| kde | okular | * | |
| kde | okular | * | |
| debian | debian_linux | 8.0 | |
| fedoraproject | fedora | 30 | |
| fedoraproject | fedora | 31 | |
| fedoraproject | fedora | 32 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:kde:okular:*:*:*:*:*:*:*:*",
"matchCriteriaId": "19DDD8EA-D428-48D0-8B88-E72F66FFB3FB",
"versionEndExcluding": "1.10.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:kde:okular:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9D538A11-BA16-4E68-AEE4-88FBA1EABBD1",
"versionEndExcluding": "19.12.3",
"versionStartIncluding": "19.12.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",
"matchCriteriaId": "97A4B8DF-58DA-4AB6-A1F9-331B36409BA3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
"matchCriteriaId": "80F0FA5D-8D3B-4C0E-81E2-87998286AF33",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
"matchCriteriaId": "36D96259-24BD-44E2-96D9-78CE1D41F956",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "KDE Okular before 1.10.0 allows code execution via an action link in a PDF document."
},
{
"lang": "es",
"value": "KDE Okular versiones anteriores a la versi\u00f3n 1.10.0, permite una ejecuci\u00f3n de c\u00f3digo por medio de un enlace de acci\u00f3n en un documento PDF."
}
],
"id": "CVE-2020-9359",
"lastModified": "2024-11-21T05:40:28.707",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 3.4,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2020-03-24T14:15:13.577",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://invent.kde.org/kde/okular/-/commit/6a93a033b4f9248b3cd4d04689b8391df754e244"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://kde.org/info/security/advisory-20200312-1.txt"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00033.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00019.html"
},
{
"source": "cve@mitre.org",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2TY3O6UWX2XTP7PISPTZ6FYRDFU4UF66/"
},
{
"source": "cve@mitre.org",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AW6GJ3AKGXOMTDHNZBMSXDTWNJJRFBDH/"
},
{
"source": "cve@mitre.org",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G3HL3F6JLCSRLPFZ47735F5STPJWDVR4/"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/202007-47"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://invent.kde.org/kde/okular/-/commit/6a93a033b4f9248b3cd4d04689b8391df754e244"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://kde.org/info/security/advisory-20200312-1.txt"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00033.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00019.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2TY3O6UWX2XTP7PISPTZ6FYRDFU4UF66/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AW6GJ3AKGXOMTDHNZBMSXDTWNJJRFBDH/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G3HL3F6JLCSRLPFZ47735F5STPJWDVR4/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/202007-47"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-JMVC-HX3F-5MJ7
Vulnerability from github – Published: 2022-05-24 17:12 – Updated: 2022-05-24 17:12
VLAI?
Details
KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.
Severity ?
5.3 (Medium)
{
"affected": [],
"aliases": [
"CVE-2020-9359"
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2020-03-24T14:15:00Z",
"severity": "MODERATE"
},
"details": "KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.",
"id": "GHSA-jmvc-hx3f-5mj7",
"modified": "2022-05-24T17:12:36Z",
"published": "2022-05-24T17:12:36Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-9359"
},
{
"type": "WEB",
"url": "https://invent.kde.org/kde/okular/-/commit/6a93a033b4f9248b3cd4d04689b8391df754e244"
},
{
"type": "WEB",
"url": "https://kde.org/info/security/advisory-20200312-1.txt"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00033.html"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00019.html"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2TY3O6UWX2XTP7PISPTZ6FYRDFU4UF66"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AW6GJ3AKGXOMTDHNZBMSXDTWNJJRFBDH"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G3HL3F6JLCSRLPFZ47735F5STPJWDVR4"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/202007-47"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"type": "CVSS_V3"
}
]
}
OPENSUSE-SU-2024:11110-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00Summary
okular-21.08.1-1.2 on GA media
Severity
Moderate
Notes
Title of the patch: okular-21.08.1-1.2 on GA media
Description of the patch: These are all security issues fixed in the okular-21.08.1-1.2 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2024-11110
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
5.3 (Medium)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
References
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "okular-21.08.1-1.2 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the okular-21.08.1-1.2 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2024-11110",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11110-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2018-1000801 page",
"url": "https://www.suse.com/security/cve/CVE-2018-1000801/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-9359 page",
"url": "https://www.suse.com/security/cve/CVE-2020-9359/"
}
],
"title": "okular-21.08.1-1.2 on GA media",
"tracking": {
"current_release_date": "2024-06-15T00:00:00Z",
"generator": {
"date": "2024-06-15T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2024:11110-1",
"initial_release_date": "2024-06-15T00:00:00Z",
"revision_history": [
{
"date": "2024-06-15T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "okular-21.08.1-1.2.aarch64",
"product": {
"name": "okular-21.08.1-1.2.aarch64",
"product_id": "okular-21.08.1-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "okular-devel-21.08.1-1.2.aarch64",
"product": {
"name": "okular-devel-21.08.1-1.2.aarch64",
"product_id": "okular-devel-21.08.1-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "okular-lang-21.08.1-1.2.aarch64",
"product": {
"name": "okular-lang-21.08.1-1.2.aarch64",
"product_id": "okular-lang-21.08.1-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "okular-mobile-21.08.1-1.2.aarch64",
"product": {
"name": "okular-mobile-21.08.1-1.2.aarch64",
"product_id": "okular-mobile-21.08.1-1.2.aarch64"
}
},
{
"category": "product_version",
"name": "okular-spectre-21.08.1-1.2.aarch64",
"product": {
"name": "okular-spectre-21.08.1-1.2.aarch64",
"product_id": "okular-spectre-21.08.1-1.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "okular-21.08.1-1.2.ppc64le",
"product": {
"name": "okular-21.08.1-1.2.ppc64le",
"product_id": "okular-21.08.1-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "okular-devel-21.08.1-1.2.ppc64le",
"product": {
"name": "okular-devel-21.08.1-1.2.ppc64le",
"product_id": "okular-devel-21.08.1-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "okular-lang-21.08.1-1.2.ppc64le",
"product": {
"name": "okular-lang-21.08.1-1.2.ppc64le",
"product_id": "okular-lang-21.08.1-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "okular-mobile-21.08.1-1.2.ppc64le",
"product": {
"name": "okular-mobile-21.08.1-1.2.ppc64le",
"product_id": "okular-mobile-21.08.1-1.2.ppc64le"
}
},
{
"category": "product_version",
"name": "okular-spectre-21.08.1-1.2.ppc64le",
"product": {
"name": "okular-spectre-21.08.1-1.2.ppc64le",
"product_id": "okular-spectre-21.08.1-1.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "okular-21.08.1-1.2.s390x",
"product": {
"name": "okular-21.08.1-1.2.s390x",
"product_id": "okular-21.08.1-1.2.s390x"
}
},
{
"category": "product_version",
"name": "okular-devel-21.08.1-1.2.s390x",
"product": {
"name": "okular-devel-21.08.1-1.2.s390x",
"product_id": "okular-devel-21.08.1-1.2.s390x"
}
},
{
"category": "product_version",
"name": "okular-lang-21.08.1-1.2.s390x",
"product": {
"name": "okular-lang-21.08.1-1.2.s390x",
"product_id": "okular-lang-21.08.1-1.2.s390x"
}
},
{
"category": "product_version",
"name": "okular-mobile-21.08.1-1.2.s390x",
"product": {
"name": "okular-mobile-21.08.1-1.2.s390x",
"product_id": "okular-mobile-21.08.1-1.2.s390x"
}
},
{
"category": "product_version",
"name": "okular-spectre-21.08.1-1.2.s390x",
"product": {
"name": "okular-spectre-21.08.1-1.2.s390x",
"product_id": "okular-spectre-21.08.1-1.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "okular-21.08.1-1.2.x86_64",
"product": {
"name": "okular-21.08.1-1.2.x86_64",
"product_id": "okular-21.08.1-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "okular-devel-21.08.1-1.2.x86_64",
"product": {
"name": "okular-devel-21.08.1-1.2.x86_64",
"product_id": "okular-devel-21.08.1-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "okular-lang-21.08.1-1.2.x86_64",
"product": {
"name": "okular-lang-21.08.1-1.2.x86_64",
"product_id": "okular-lang-21.08.1-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "okular-mobile-21.08.1-1.2.x86_64",
"product": {
"name": "okular-mobile-21.08.1-1.2.x86_64",
"product_id": "okular-mobile-21.08.1-1.2.x86_64"
}
},
{
"category": "product_version",
"name": "okular-spectre-21.08.1-1.2.x86_64",
"product": {
"name": "okular-spectre-21.08.1-1.2.x86_64",
"product_id": "okular-spectre-21.08.1-1.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-21.08.1-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:okular-21.08.1-1.2.aarch64"
},
"product_reference": "okular-21.08.1-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-21.08.1-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:okular-21.08.1-1.2.ppc64le"
},
"product_reference": "okular-21.08.1-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-21.08.1-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:okular-21.08.1-1.2.s390x"
},
"product_reference": "okular-21.08.1-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-21.08.1-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:okular-21.08.1-1.2.x86_64"
},
"product_reference": "okular-21.08.1-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-21.08.1-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:okular-devel-21.08.1-1.2.aarch64"
},
"product_reference": "okular-devel-21.08.1-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-21.08.1-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:okular-devel-21.08.1-1.2.ppc64le"
},
"product_reference": "okular-devel-21.08.1-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-21.08.1-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:okular-devel-21.08.1-1.2.s390x"
},
"product_reference": "okular-devel-21.08.1-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-21.08.1-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:okular-devel-21.08.1-1.2.x86_64"
},
"product_reference": "okular-devel-21.08.1-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-lang-21.08.1-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:okular-lang-21.08.1-1.2.aarch64"
},
"product_reference": "okular-lang-21.08.1-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-lang-21.08.1-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:okular-lang-21.08.1-1.2.ppc64le"
},
"product_reference": "okular-lang-21.08.1-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-lang-21.08.1-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:okular-lang-21.08.1-1.2.s390x"
},
"product_reference": "okular-lang-21.08.1-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-lang-21.08.1-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:okular-lang-21.08.1-1.2.x86_64"
},
"product_reference": "okular-lang-21.08.1-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-mobile-21.08.1-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.aarch64"
},
"product_reference": "okular-mobile-21.08.1-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-mobile-21.08.1-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.ppc64le"
},
"product_reference": "okular-mobile-21.08.1-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-mobile-21.08.1-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.s390x"
},
"product_reference": "okular-mobile-21.08.1-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-mobile-21.08.1-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.x86_64"
},
"product_reference": "okular-mobile-21.08.1-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-spectre-21.08.1-1.2.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.aarch64"
},
"product_reference": "okular-spectre-21.08.1-1.2.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-spectre-21.08.1-1.2.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.ppc64le"
},
"product_reference": "okular-spectre-21.08.1-1.2.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-spectre-21.08.1-1.2.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.s390x"
},
"product_reference": "okular-spectre-21.08.1-1.2.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-spectre-21.08.1-1.2.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.x86_64"
},
"product_reference": "okular-spectre-21.08.1-1.2.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-1000801",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2018-1000801"
}
],
"notes": [
{
"category": "general",
"text": "okular version 18.08 and earlier contains a Directory Traversal vulnerability in function \"unpackDocumentArchive(...)\" in \"core/document.cpp\" that can result in Arbitrary file creation on the user workstation. This attack appear to be exploitable via he victim must open a specially crafted Okular archive. This issue appears to have been corrected in version 18.08.1",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:okular-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-21.08.1-1.2.x86_64",
"openSUSE Tumbleweed:okular-devel-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-devel-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-devel-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-devel-21.08.1-1.2.x86_64",
"openSUSE Tumbleweed:okular-lang-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-lang-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-lang-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-lang-21.08.1-1.2.x86_64",
"openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.x86_64",
"openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2018-1000801",
"url": "https://www.suse.com/security/cve/CVE-2018-1000801"
},
{
"category": "external",
"summary": "SUSE Bug 1107591 for CVE-2018-1000801",
"url": "https://bugzilla.suse.com/1107591"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:okular-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-21.08.1-1.2.x86_64",
"openSUSE Tumbleweed:okular-devel-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-devel-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-devel-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-devel-21.08.1-1.2.x86_64",
"openSUSE Tumbleweed:okular-lang-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-lang-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-lang-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-lang-21.08.1-1.2.x86_64",
"openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.x86_64",
"openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"openSUSE Tumbleweed:okular-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-21.08.1-1.2.x86_64",
"openSUSE Tumbleweed:okular-devel-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-devel-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-devel-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-devel-21.08.1-1.2.x86_64",
"openSUSE Tumbleweed:okular-lang-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-lang-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-lang-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-lang-21.08.1-1.2.x86_64",
"openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.x86_64",
"openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2018-1000801"
},
{
"cve": "CVE-2020-9359",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-9359"
}
],
"notes": [
{
"category": "general",
"text": "KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:okular-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-21.08.1-1.2.x86_64",
"openSUSE Tumbleweed:okular-devel-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-devel-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-devel-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-devel-21.08.1-1.2.x86_64",
"openSUSE Tumbleweed:okular-lang-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-lang-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-lang-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-lang-21.08.1-1.2.x86_64",
"openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.x86_64",
"openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-9359",
"url": "https://www.suse.com/security/cve/CVE-2020-9359"
},
{
"category": "external",
"summary": "SUSE Bug 1167435 for CVE-2020-9359",
"url": "https://bugzilla.suse.com/1167435"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:okular-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-21.08.1-1.2.x86_64",
"openSUSE Tumbleweed:okular-devel-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-devel-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-devel-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-devel-21.08.1-1.2.x86_64",
"openSUSE Tumbleweed:okular-lang-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-lang-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-lang-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-lang-21.08.1-1.2.x86_64",
"openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.x86_64",
"openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:okular-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-21.08.1-1.2.x86_64",
"openSUSE Tumbleweed:okular-devel-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-devel-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-devel-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-devel-21.08.1-1.2.x86_64",
"openSUSE Tumbleweed:okular-lang-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-lang-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-lang-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-lang-21.08.1-1.2.x86_64",
"openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-mobile-21.08.1-1.2.x86_64",
"openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.aarch64",
"openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.ppc64le",
"openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.s390x",
"openSUSE Tumbleweed:okular-spectre-21.08.1-1.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2024-06-15T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2020-9359"
}
]
}
RHSA-2020_4024
Vulnerability from csaf_redhat - Published: 2020-09-29 20:04 - Updated: 2024-11-22 15:08Summary
Red Hat Security Advisory: okular security update
Severity
Moderate
Notes
Topic: An update for okular is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Okular is a universal document viewer developed by KDE supporting different kinds of documents, like PDF, Postscript, DjVu, CHM, XPS, ePub and others.
Security Fix(es):
* okular: local binary execution via specially crafted PDF files (CVE-2020-9359)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes linked from the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.
5.3 (Medium)
Vendor Fix
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4024
Workaround
There's no available mitigation other than don't open PDF files from untrusted sources.
References
| URL | Category | |||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for okular is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Okular is a universal document viewer developed by KDE supporting different kinds of documents, like PDF, Postscript, DjVu, CHM, XPS, ePub and others.\n\nSecurity Fix(es):\n\n* okular: local binary execution via specially crafted PDF files (CVE-2020-9359)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes linked from the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:4024",
"url": "https://access.redhat.com/errata/RHSA-2020:4024"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index"
},
{
"category": "external",
"summary": "1815651",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1815651"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4024.json"
}
],
"title": "Red Hat Security Advisory: okular security update",
"tracking": {
"current_release_date": "2024-11-22T15:08:42+00:00",
"generator": {
"date": "2024-11-22T15:08:42+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.1"
}
},
"id": "RHSA-2020:4024",
"initial_release_date": "2020-09-29T20:04:53+00:00",
"revision_history": [
{
"date": "2020-09-29T20:04:53+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-09-29T20:04:53+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-22T15:08:42+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "okular-0:4.10.5-9.el7.x86_64",
"product": {
"name": "okular-0:4.10.5-9.el7.x86_64",
"product_id": "okular-0:4.10.5-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular@4.10.5-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "okular-libs-0:4.10.5-9.el7.x86_64",
"product": {
"name": "okular-libs-0:4.10.5-9.el7.x86_64",
"product_id": "okular-libs-0:4.10.5-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular-libs@4.10.5-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "okular-part-0:4.10.5-9.el7.x86_64",
"product": {
"name": "okular-part-0:4.10.5-9.el7.x86_64",
"product_id": "okular-part-0:4.10.5-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular-part@4.10.5-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "okular-debuginfo-0:4.10.5-9.el7.x86_64",
"product": {
"name": "okular-debuginfo-0:4.10.5-9.el7.x86_64",
"product_id": "okular-debuginfo-0:4.10.5-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular-debuginfo@4.10.5-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "okular-devel-0:4.10.5-9.el7.x86_64",
"product": {
"name": "okular-devel-0:4.10.5-9.el7.x86_64",
"product_id": "okular-devel-0:4.10.5-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular-devel@4.10.5-9.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "okular-libs-0:4.10.5-9.el7.i686",
"product": {
"name": "okular-libs-0:4.10.5-9.el7.i686",
"product_id": "okular-libs-0:4.10.5-9.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular-libs@4.10.5-9.el7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "okular-debuginfo-0:4.10.5-9.el7.i686",
"product": {
"name": "okular-debuginfo-0:4.10.5-9.el7.i686",
"product_id": "okular-debuginfo-0:4.10.5-9.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular-debuginfo@4.10.5-9.el7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "okular-devel-0:4.10.5-9.el7.i686",
"product": {
"name": "okular-devel-0:4.10.5-9.el7.i686",
"product_id": "okular-devel-0:4.10.5-9.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular-devel@4.10.5-9.el7?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "okular-0:4.10.5-9.el7.src",
"product": {
"name": "okular-0:4.10.5-9.el7.src",
"product_id": "okular-0:4.10.5-9.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular@4.10.5-9.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "okular-0:4.10.5-9.el7.ppc64le",
"product": {
"name": "okular-0:4.10.5-9.el7.ppc64le",
"product_id": "okular-0:4.10.5-9.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular@4.10.5-9.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "okular-devel-0:4.10.5-9.el7.ppc64le",
"product": {
"name": "okular-devel-0:4.10.5-9.el7.ppc64le",
"product_id": "okular-devel-0:4.10.5-9.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular-devel@4.10.5-9.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "okular-libs-0:4.10.5-9.el7.ppc64le",
"product": {
"name": "okular-libs-0:4.10.5-9.el7.ppc64le",
"product_id": "okular-libs-0:4.10.5-9.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular-libs@4.10.5-9.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "okular-part-0:4.10.5-9.el7.ppc64le",
"product": {
"name": "okular-part-0:4.10.5-9.el7.ppc64le",
"product_id": "okular-part-0:4.10.5-9.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular-part@4.10.5-9.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"product": {
"name": "okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"product_id": "okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular-debuginfo@4.10.5-9.el7?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-0:4.10.5-9.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-0:4.10.5-9.el7.src"
},
"product_reference": "okular-0:4.10.5-9.el7.src",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-debuginfo-0:4.10.5-9.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.i686"
},
"product_reference": "okular-debuginfo-0:4.10.5-9.el7.i686",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-debuginfo-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-debuginfo-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-debuginfo-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-9.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-devel-0:4.10.5-9.el7.i686"
},
"product_reference": "okular-devel-0:4.10.5-9.el7.i686",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-devel-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-devel-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-devel-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-devel-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-9.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-libs-0:4.10.5-9.el7.i686"
},
"product_reference": "okular-libs-0:4.10.5-9.el7.i686",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-libs-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-libs-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-libs-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-libs-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-part-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-part-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-part-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-part-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-part-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-part-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-0:4.10.5-9.el7.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-0:4.10.5-9.el7.src"
},
"product_reference": "okular-0:4.10.5-9.el7.src",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-debuginfo-0:4.10.5-9.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.i686"
},
"product_reference": "okular-debuginfo-0:4.10.5-9.el7.i686",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-debuginfo-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-debuginfo-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-debuginfo-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-9.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.i686"
},
"product_reference": "okular-devel-0:4.10.5-9.el7.i686",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-devel-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-devel-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-9.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.i686"
},
"product_reference": "okular-libs-0:4.10.5-9.el7.i686",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-libs-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-libs-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-part-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-part-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-part-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-part-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-part-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-part-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-0:4.10.5-9.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-0:4.10.5-9.el7.src"
},
"product_reference": "okular-0:4.10.5-9.el7.src",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-debuginfo-0:4.10.5-9.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.i686"
},
"product_reference": "okular-debuginfo-0:4.10.5-9.el7.i686",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-debuginfo-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-debuginfo-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-debuginfo-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-9.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-devel-0:4.10.5-9.el7.i686"
},
"product_reference": "okular-devel-0:4.10.5-9.el7.i686",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-devel-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-devel-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-devel-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-devel-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-9.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-libs-0:4.10.5-9.el7.i686"
},
"product_reference": "okular-libs-0:4.10.5-9.el7.i686",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-libs-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-libs-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-libs-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-libs-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-part-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-part-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-part-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-part-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-part-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-part-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-0:4.10.5-9.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-0:4.10.5-9.el7.src"
},
"product_reference": "okular-0:4.10.5-9.el7.src",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-debuginfo-0:4.10.5-9.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.i686"
},
"product_reference": "okular-debuginfo-0:4.10.5-9.el7.i686",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-debuginfo-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-debuginfo-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-debuginfo-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-9.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-devel-0:4.10.5-9.el7.i686"
},
"product_reference": "okular-devel-0:4.10.5-9.el7.i686",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-devel-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-devel-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-devel-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-devel-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-9.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-libs-0:4.10.5-9.el7.i686"
},
"product_reference": "okular-libs-0:4.10.5-9.el7.i686",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-libs-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-libs-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-libs-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-libs-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-part-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-part-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-part-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-part-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-part-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-part-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-9359",
"cwe": {
"id": "CWE-184",
"name": "Incomplete List of Disallowed Inputs"
},
"discovery_date": "2020-03-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1815651"
}
],
"notes": [
{
"category": "description",
"text": "KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "okular: local binary execution via specially crafted PDF files",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-0:4.10.5-9.el7.src",
"7Client-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Client-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Client-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-part-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-0:4.10.5-9.el7.src",
"7Client-optional-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-part-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-0:4.10.5-9.el7.src",
"7Server-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Server-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Server-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-part-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-0:4.10.5-9.el7.src",
"7Workstation-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Workstation-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Workstation-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-part-0:4.10.5-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-9359"
},
{
"category": "external",
"summary": "RHBZ#1815651",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1815651"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-9359",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9359"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-9359",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-9359"
},
{
"category": "external",
"summary": "https://kde.org/info/security/advisory-20200312-1.txt",
"url": "https://kde.org/info/security/advisory-20200312-1.txt"
}
],
"release_date": "2020-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-09-29T20:04:53+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-0:4.10.5-9.el7.src",
"7Client-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Client-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Client-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-part-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-0:4.10.5-9.el7.src",
"7Client-optional-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-part-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-0:4.10.5-9.el7.src",
"7Server-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Server-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Server-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-part-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-0:4.10.5-9.el7.src",
"7Workstation-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Workstation-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Workstation-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-part-0:4.10.5-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:4024"
},
{
"category": "workaround",
"details": "There\u0027s no available mitigation other than don\u0027t open PDF files from untrusted sources.",
"product_ids": [
"7Client-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-0:4.10.5-9.el7.src",
"7Client-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Client-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Client-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-part-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-0:4.10.5-9.el7.src",
"7Client-optional-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-part-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-0:4.10.5-9.el7.src",
"7Server-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Server-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Server-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-part-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-0:4.10.5-9.el7.src",
"7Workstation-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Workstation-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Workstation-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-part-0:4.10.5-9.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"7Client-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-0:4.10.5-9.el7.src",
"7Client-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Client-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Client-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-part-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-0:4.10.5-9.el7.src",
"7Client-optional-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-part-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-0:4.10.5-9.el7.src",
"7Server-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Server-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Server-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-part-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-0:4.10.5-9.el7.src",
"7Workstation-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Workstation-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Workstation-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-part-0:4.10.5-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "okular: local binary execution via specially crafted PDF files"
}
]
}
RHSA-2020:4024
Vulnerability from csaf_redhat - Published: 2020-09-29 20:04 - Updated: 2025-11-21 18:17Summary
Red Hat Security Advisory: okular security update
Severity
Moderate
Notes
Topic: An update for okular is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Okular is a universal document viewer developed by KDE supporting different kinds of documents, like PDF, Postscript, DjVu, CHM, XPS, ePub and others.
Security Fix(es):
* okular: local binary execution via specially crafted PDF files (CVE-2020-9359)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes linked from the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.
5.3 (Medium)
Vendor Fix
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:4024
Workaround
There's no available mitigation other than don't open PDF files from untrusted sources.
References
| URL | Category | |||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for okular is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Okular is a universal document viewer developed by KDE supporting different kinds of documents, like PDF, Postscript, DjVu, CHM, XPS, ePub and others.\n\nSecurity Fix(es):\n\n* okular: local binary execution via specially crafted PDF files (CVE-2020-9359)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes linked from the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2020:4024",
"url": "https://access.redhat.com/errata/RHSA-2020:4024"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index"
},
{
"category": "external",
"summary": "1815651",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1815651"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4024.json"
}
],
"title": "Red Hat Security Advisory: okular security update",
"tracking": {
"current_release_date": "2025-11-21T18:17:08+00:00",
"generator": {
"date": "2025-11-21T18:17:08+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.12"
}
},
"id": "RHSA-2020:4024",
"initial_release_date": "2020-09-29T20:04:53+00:00",
"revision_history": [
{
"date": "2020-09-29T20:04:53+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-09-29T20:04:53+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-11-21T18:17:08+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "okular-0:4.10.5-9.el7.x86_64",
"product": {
"name": "okular-0:4.10.5-9.el7.x86_64",
"product_id": "okular-0:4.10.5-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular@4.10.5-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "okular-libs-0:4.10.5-9.el7.x86_64",
"product": {
"name": "okular-libs-0:4.10.5-9.el7.x86_64",
"product_id": "okular-libs-0:4.10.5-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular-libs@4.10.5-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "okular-part-0:4.10.5-9.el7.x86_64",
"product": {
"name": "okular-part-0:4.10.5-9.el7.x86_64",
"product_id": "okular-part-0:4.10.5-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular-part@4.10.5-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "okular-debuginfo-0:4.10.5-9.el7.x86_64",
"product": {
"name": "okular-debuginfo-0:4.10.5-9.el7.x86_64",
"product_id": "okular-debuginfo-0:4.10.5-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular-debuginfo@4.10.5-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "okular-devel-0:4.10.5-9.el7.x86_64",
"product": {
"name": "okular-devel-0:4.10.5-9.el7.x86_64",
"product_id": "okular-devel-0:4.10.5-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular-devel@4.10.5-9.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "okular-libs-0:4.10.5-9.el7.i686",
"product": {
"name": "okular-libs-0:4.10.5-9.el7.i686",
"product_id": "okular-libs-0:4.10.5-9.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular-libs@4.10.5-9.el7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "okular-debuginfo-0:4.10.5-9.el7.i686",
"product": {
"name": "okular-debuginfo-0:4.10.5-9.el7.i686",
"product_id": "okular-debuginfo-0:4.10.5-9.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular-debuginfo@4.10.5-9.el7?arch=i686"
}
}
},
{
"category": "product_version",
"name": "okular-devel-0:4.10.5-9.el7.i686",
"product": {
"name": "okular-devel-0:4.10.5-9.el7.i686",
"product_id": "okular-devel-0:4.10.5-9.el7.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular-devel@4.10.5-9.el7?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "okular-0:4.10.5-9.el7.src",
"product": {
"name": "okular-0:4.10.5-9.el7.src",
"product_id": "okular-0:4.10.5-9.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular@4.10.5-9.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "okular-0:4.10.5-9.el7.ppc64le",
"product": {
"name": "okular-0:4.10.5-9.el7.ppc64le",
"product_id": "okular-0:4.10.5-9.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular@4.10.5-9.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "okular-devel-0:4.10.5-9.el7.ppc64le",
"product": {
"name": "okular-devel-0:4.10.5-9.el7.ppc64le",
"product_id": "okular-devel-0:4.10.5-9.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular-devel@4.10.5-9.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "okular-libs-0:4.10.5-9.el7.ppc64le",
"product": {
"name": "okular-libs-0:4.10.5-9.el7.ppc64le",
"product_id": "okular-libs-0:4.10.5-9.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular-libs@4.10.5-9.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "okular-part-0:4.10.5-9.el7.ppc64le",
"product": {
"name": "okular-part-0:4.10.5-9.el7.ppc64le",
"product_id": "okular-part-0:4.10.5-9.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular-part@4.10.5-9.el7?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"product": {
"name": "okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"product_id": "okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/okular-debuginfo@4.10.5-9.el7?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-0:4.10.5-9.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-0:4.10.5-9.el7.src"
},
"product_reference": "okular-0:4.10.5-9.el7.src",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-debuginfo-0:4.10.5-9.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.i686"
},
"product_reference": "okular-debuginfo-0:4.10.5-9.el7.i686",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-debuginfo-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-debuginfo-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-debuginfo-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-9.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-devel-0:4.10.5-9.el7.i686"
},
"product_reference": "okular-devel-0:4.10.5-9.el7.i686",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-devel-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-devel-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-devel-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-devel-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-9.el7.i686 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-libs-0:4.10.5-9.el7.i686"
},
"product_reference": "okular-libs-0:4.10.5-9.el7.i686",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-libs-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-libs-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-libs-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-libs-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-part-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-part-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-part-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-part-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
"product_id": "7Client-7.9:okular-part-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-part-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Client-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-0:4.10.5-9.el7.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-0:4.10.5-9.el7.src"
},
"product_reference": "okular-0:4.10.5-9.el7.src",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-debuginfo-0:4.10.5-9.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.i686"
},
"product_reference": "okular-debuginfo-0:4.10.5-9.el7.i686",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-debuginfo-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-debuginfo-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-debuginfo-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-9.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.i686"
},
"product_reference": "okular-devel-0:4.10.5-9.el7.i686",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-devel-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-devel-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-9.el7.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.i686"
},
"product_reference": "okular-libs-0:4.10.5-9.el7.i686",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-libs-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-libs-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-part-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-part-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-part-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-part-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.9:okular-part-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-part-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Client-optional-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-0:4.10.5-9.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-0:4.10.5-9.el7.src"
},
"product_reference": "okular-0:4.10.5-9.el7.src",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-debuginfo-0:4.10.5-9.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.i686"
},
"product_reference": "okular-debuginfo-0:4.10.5-9.el7.i686",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-debuginfo-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-debuginfo-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-debuginfo-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-9.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-devel-0:4.10.5-9.el7.i686"
},
"product_reference": "okular-devel-0:4.10.5-9.el7.i686",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-devel-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-devel-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-devel-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-devel-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-9.el7.i686 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-libs-0:4.10.5-9.el7.i686"
},
"product_reference": "okular-libs-0:4.10.5-9.el7.i686",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-libs-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-libs-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-libs-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-libs-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-part-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-part-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-part-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-part-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.9:okular-part-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-part-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Server-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-0:4.10.5-9.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-0:4.10.5-9.el7.src"
},
"product_reference": "okular-0:4.10.5-9.el7.src",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-debuginfo-0:4.10.5-9.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.i686"
},
"product_reference": "okular-debuginfo-0:4.10.5-9.el7.i686",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-debuginfo-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-debuginfo-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-debuginfo-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-9.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-devel-0:4.10.5-9.el7.i686"
},
"product_reference": "okular-devel-0:4.10.5-9.el7.i686",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-devel-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-devel-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-devel-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-devel-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-devel-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-9.el7.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-libs-0:4.10.5-9.el7.i686"
},
"product_reference": "okular-libs-0:4.10.5-9.el7.i686",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-libs-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-libs-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-libs-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-libs-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-libs-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-part-0:4.10.5-9.el7.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-part-0:4.10.5-9.el7.ppc64le"
},
"product_reference": "okular-part-0:4.10.5-9.el7.ppc64le",
"relates_to_product_reference": "7Workstation-7.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "okular-part-0:4.10.5-9.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.9:okular-part-0:4.10.5-9.el7.x86_64"
},
"product_reference": "okular-part-0:4.10.5-9.el7.x86_64",
"relates_to_product_reference": "7Workstation-7.9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-9359",
"cwe": {
"id": "CWE-184",
"name": "Incomplete List of Disallowed Inputs"
},
"discovery_date": "2020-03-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1815651"
}
],
"notes": [
{
"category": "description",
"text": "KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "okular: local binary execution via specially crafted PDF files",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-0:4.10.5-9.el7.src",
"7Client-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Client-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Client-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-part-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-0:4.10.5-9.el7.src",
"7Client-optional-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-part-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-0:4.10.5-9.el7.src",
"7Server-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Server-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Server-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-part-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-0:4.10.5-9.el7.src",
"7Workstation-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Workstation-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Workstation-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-part-0:4.10.5-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-9359"
},
{
"category": "external",
"summary": "RHBZ#1815651",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1815651"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-9359",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9359"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-9359",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-9359"
},
{
"category": "external",
"summary": "https://kde.org/info/security/advisory-20200312-1.txt",
"url": "https://kde.org/info/security/advisory-20200312-1.txt"
}
],
"release_date": "2020-03-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-09-29T20:04:53+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Client-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-0:4.10.5-9.el7.src",
"7Client-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Client-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Client-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-part-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-0:4.10.5-9.el7.src",
"7Client-optional-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-part-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-0:4.10.5-9.el7.src",
"7Server-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Server-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Server-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-part-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-0:4.10.5-9.el7.src",
"7Workstation-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Workstation-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Workstation-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-part-0:4.10.5-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2020:4024"
},
{
"category": "workaround",
"details": "There\u0027s no available mitigation other than don\u0027t open PDF files from untrusted sources.",
"product_ids": [
"7Client-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-0:4.10.5-9.el7.src",
"7Client-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Client-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Client-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-part-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-0:4.10.5-9.el7.src",
"7Client-optional-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-part-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-0:4.10.5-9.el7.src",
"7Server-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Server-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Server-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-part-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-0:4.10.5-9.el7.src",
"7Workstation-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Workstation-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Workstation-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-part-0:4.10.5-9.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"7Client-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-0:4.10.5-9.el7.src",
"7Client-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Client-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Client-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Client-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Client-7.9:okular-part-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-0:4.10.5-9.el7.src",
"7Client-optional-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Client-optional-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Client-optional-7.9:okular-part-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-0:4.10.5-9.el7.src",
"7Server-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Server-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Server-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Server-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Server-7.9:okular-part-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-0:4.10.5-9.el7.src",
"7Workstation-7.9:okular-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.i686",
"7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-debuginfo-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-devel-0:4.10.5-9.el7.i686",
"7Workstation-7.9:okular-devel-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-devel-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-libs-0:4.10.5-9.el7.i686",
"7Workstation-7.9:okular-libs-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-libs-0:4.10.5-9.el7.x86_64",
"7Workstation-7.9:okular-part-0:4.10.5-9.el7.ppc64le",
"7Workstation-7.9:okular-part-0:4.10.5-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "okular: local binary execution via specially crafted PDF files"
}
]
}
GSD-2020-9359
Vulnerability from gsd - Updated: 2023-12-13 01:21Details
KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2020-9359",
"description": "KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.",
"id": "GSD-2020-9359",
"references": [
"https://www.suse.com/security/cve/CVE-2020-9359.html",
"https://access.redhat.com/errata/RHSA-2020:4024",
"https://advisories.mageia.org/CVE-2020-9359.html",
"https://security.archlinux.org/CVE-2020-9359",
"https://linux.oracle.com/cve/CVE-2020-9359.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2020-9359"
],
"details": "KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.",
"id": "GSD-2020-9359",
"modified": "2023-12-13T01:21:53.177074Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-9359",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "KDE Okular before 1.10.0 allows code execution via an action link in a PDF document."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "FEDORA-2020-7036f54316",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2TY3O6UWX2XTP7PISPTZ6FYRDFU4UF66/"
},
{
"name": "https://invent.kde.org/kde/okular/-/commit/6a93a033b4f9248b3cd4d04689b8391df754e244",
"refsource": "CONFIRM",
"url": "https://invent.kde.org/kde/okular/-/commit/6a93a033b4f9248b3cd4d04689b8391df754e244"
},
{
"name": "https://kde.org/info/security/advisory-20200312-1.txt",
"refsource": "CONFIRM",
"url": "https://kde.org/info/security/advisory-20200312-1.txt"
},
{
"name": "[debian-lts-announce] 20200325 [SECURITY] [DLA 2159-1] okular security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00033.html"
},
{
"name": "FEDORA-2020-dcde488e68",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AW6GJ3AKGXOMTDHNZBMSXDTWNJJRFBDH/"
},
{
"name": "FEDORA-2020-e35573f7df",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G3HL3F6JLCSRLPFZ47735F5STPJWDVR4/"
},
{
"name": "GLSA-202007-47",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/202007-47"
},
{
"name": "[debian-lts-announce] 20211227 [SECURITY] [DLA 2856-1] okular security update",
"refsource": "MLIST",
"url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00019.html"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:kde:okular:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "1.10.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:kde:okular:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "19.12.3",
"versionStartIncluding": "19.12.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-9359"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "KDE Okular before 1.10.0 allows code execution via an action link in a PDF document."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://invent.kde.org/kde/okular/-/commit/6a93a033b4f9248b3cd4d04689b8391df754e244",
"refsource": "CONFIRM",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://invent.kde.org/kde/okular/-/commit/6a93a033b4f9248b3cd4d04689b8391df754e244"
},
{
"name": "https://kde.org/info/security/advisory-20200312-1.txt",
"refsource": "CONFIRM",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://kde.org/info/security/advisory-20200312-1.txt"
},
{
"name": "FEDORA-2020-7036f54316",
"refsource": "FEDORA",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2TY3O6UWX2XTP7PISPTZ6FYRDFU4UF66/"
},
{
"name": "[debian-lts-announce] 20200325 [SECURITY] [DLA 2159-1] okular security update",
"refsource": "MLIST",
"tags": [
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2020/03/msg00033.html"
},
{
"name": "FEDORA-2020-dcde488e68",
"refsource": "FEDORA",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AW6GJ3AKGXOMTDHNZBMSXDTWNJJRFBDH/"
},
{
"name": "FEDORA-2020-e35573f7df",
"refsource": "FEDORA",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G3HL3F6JLCSRLPFZ47735F5STPJWDVR4/"
},
{
"name": "GLSA-202007-47",
"refsource": "GENTOO",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/202007-47"
},
{
"name": "[debian-lts-announce] 20211227 [SECURITY] [DLA 2856-1] okular security update",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.debian.org/debian-lts-announce/2021/12/msg00019.html"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": true
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 3.4
}
},
"lastModifiedDate": "2022-04-12T18:41Z",
"publishedDate": "2020-03-24T14:15Z"
}
}
}
BDU:2021-01695
Vulnerability from fstec - Published: 24.03.2020
VLAI Severity ?
Title
Уязвимость программного обеспечения для просмотра PDF-документов Okular, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
Description
Уязвимость программного обеспечения для просмотра PDF-документов Okular связана недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
Severity ?
Vendor
ООО «РусБИТех-Астра», Fedora Project, Сообщество свободного программного обеспечения, АО "НППКТ"
Software Name
Astra Linux Common Edition (запись в едином реестре российских программ №4433), Fedora, Debian GNU/Linux, Okular, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913)
Software Version
2.12 «Орёл» (Astra Linux Common Edition), 30 (Fedora), 8 (Debian GNU/Linux), 31 (Fedora), 32 (Fedora), до 1.10.0 (Okular), до 2.1 (ОСОН ОСнова Оnyx)
Possible Mitigations
Использование рекомендаций:
Для Okular:
Обновление программного обеспечения до 4:20.12.1-1 или более поздней версии
Для Debian:
Обновление программного обеспечения (пакета okular) до 4:17.12.2-2.2+deb10u1 или более поздней версии
Для Astra Linux:
Обновление программного обеспечения (пакета okular) до 4:17.12.2-2.2+deb10u1 или более поздней версии
Для Fedora:
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2TY3O6UWX2XTP7PISPTZ6FYRDFU4UF66/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AW6GJ3AKGXOMTDHNZBMSXDTWNJJRFBDH/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G3HL3F6JLCSRLPFZ47735F5STPJWDVR4/
Для ОСОН Основа:
Обновление программного обеспечения okular до версии 4:17.12.2-2.2+deb10u1
Reference
https://invent.kde.org/kde/okular/-/commit/6a93a033b4f9248b3cd4d04689b8391df754e244
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2TY3O6UWX2XTP7PISPTZ6FYRDFU4UF66/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AW6GJ3AKGXOMTDHNZBMSXDTWNJJRFBDH/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G3HL3F6JLCSRLPFZ47735F5STPJWDVR4/
https://nvd.nist.gov/vuln/detail/CVE-2020-9359
https://security-tracker.debian.org/tracker/CVE-2020-9359
https://sysdream.com/news/lab/2020-03-24-cve-2020-9359-okular-command-execution/
https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.1/
CWE
CWE-20
{
"CVSS 2.0": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"CVSS 3.0": "AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb, Fedora Project, \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u0410\u041e \"\u041d\u041f\u041f\u041a\u0422\"",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "2.12 \u00ab\u041e\u0440\u0451\u043b\u00bb (Astra Linux Common Edition), 30 (Fedora), 8 (Debian GNU/Linux), 31 (Fedora), 32 (Fedora), \u0434\u043e 1.10.0 (Okular), \u0434\u043e 2.1 (\u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f Okular:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e 4:20.12.1-1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438\n\n\u0414\u043b\u044f Debian:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f (\u043f\u0430\u043a\u0435\u0442\u0430 okular) \u0434\u043e 4:17.12.2-2.2+deb10u1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438\n\n\u0414\u043b\u044f Astra Linux:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f (\u043f\u0430\u043a\u0435\u0442\u0430 okular) \u0434\u043e 4:17.12.2-2.2+deb10u1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438\n\n\u0414\u043b\u044f Fedora:\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2TY3O6UWX2XTP7PISPTZ6FYRDFU4UF66/ \nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AW6GJ3AKGXOMTDHNZBMSXDTWNJJRFBDH/ \nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G3HL3F6JLCSRLPFZ47735F5STPJWDVR4/\n\n\u0414\u043b\u044f \u041e\u0421\u041e\u041d \u041e\u0441\u043d\u043e\u0432\u0430:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f okular \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 4:17.12.2-2.2+deb10u1",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "24.03.2020",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "17.10.2022",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "30.03.2021",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2021-01695",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2020-9359",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Astra Linux Common Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21164433), Fedora, Debian GNU/Linux, Okular, \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Common Edition 2.12 \u00ab\u041e\u0440\u0451\u043b\u00bb (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21164433), Fedora Project Fedora 30 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 8 , Fedora Project Fedora 31 , Fedora Project Fedora 32 ",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 PDF-\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 Okular, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0438\u0445 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 PDF-\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 Okular \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0438\u0445 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://invent.kde.org/kde/okular/-/commit/6a93a033b4f9248b3cd4d04689b8391df754e244\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2TY3O6UWX2XTP7PISPTZ6FYRDFU4UF66/\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AW6GJ3AKGXOMTDHNZBMSXDTWNJJRFBDH/\nhttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G3HL3F6JLCSRLPFZ47735F5STPJWDVR4/\nhttps://nvd.nist.gov/vuln/detail/CVE-2020-9359\nhttps://security-tracker.debian.org/tracker/CVE-2020-9359\nhttps://sysdream.com/news/lab/2020-03-24-cve-2020-9359-okular-command-execution/\nhttps://\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430.\u043d\u043f\u043f\u043a\u0442.\u0440\u0444/bin/view/\u041e\u0421\u043d\u043e\u0432\u0430/\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f/2.1/",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,3)"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…