okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" in "core/document.cpp" that can result in Arbitrary file creation on the user workstation. This attack appear to be exploitable via he victim must open a specially crafted Okular archive. This issue appears to have been corrected in version 18.08.1

The remote Ubuntu 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4830-1 advisory.

    It was discovered that Okular mishandled certain crafted archives during extraction. An attacker could use     this vulnerability to write arbitrary files to the filesystem.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1173 advisory.

    [4.10.5-8]
    - Fix path traversal issue when extracting an .okular file       Resolves: bz#1634726

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has okular packages installed that are affected by a vulnerability:

  - okular version 18.08 and earlier contains a Directory Traversal vulnerability in function     unpackDocumentArchive(...) in core/document.cpp that can result in Arbitrary file creation on the user     workstation. This attack appear to be exploitable via he victim must open a specially crafted Okular     archive. This issue appears to have been corrected in version 18.08.1 (CVE-2018-1000801)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has okular packages installed that are affected by a vulnerability:

  - okular version 18.08 and earlier contains a Directory Traversal vulnerability in function     unpackDocumentArchive(...) in core/document.cpp that can result in Arbitrary file creation on the user     workstation. This attack appear to be exploitable via he victim must open a specially crafted Okular     archive. This issue appears to have been corrected in version 18.08.1 (CVE-2018-1000801)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

* okular: Directory traversal in function unpackDocumentArchive() in core/document.cpp

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1173 advisory.

  - okular version 18.08 and earlier contains a Directory Traversal vulnerability in function     unpackDocumentArchive(...) in core/document.cpp that can result in Arbitrary file creation on the user     workstation. This attack appear to be exploitable via he victim must open a specially crafted Okular     archive. This issue appears to have been corrected in version 18.08.1 (CVE-2018-1000801)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1173 advisory.

    Okular is a universal document viewer developed by KDE supporting different kinds of documents, like PDF,     Postscript, DjVu, CHM, XPS, ePub and others.

    Security Fix(es):

    * okular: Directory traversal in function unpackDocumentArchive() in core/document.cpp (CVE-2018-1000801)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.8 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201811-08 (Okular: Directory traversal)

    It was discovered that Okular contains a Directory Traversal       vulnerability in function unpackDocumentArchive() in core/document.cpp.
  Impact :

    A remote attacker could entice a user to open a specially crafted Okular       archive, possibly allowing the writing of arbitrary files with the       privileges of the process.
  Workaround :

    There is no known workaround at this time.

This update for okular fixes the following security issue :

  - CVE-2018-1000801: Prevent directory traversal     vulnerability in function unpackDocumentArchive could     have resulted in arbitrary file creation via a specially     crafted Okular archive (bsc#1107591).

Security fix for CVE-2018-1000801

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Joran Herve discovered that the Okular document viewer was susceptible to directory traversal via malformed .okular files (annotated document archives), which could result in the creation of arbitrary files.

Joran Herve discovered that the Okular document viewer was susceptible to directory traversal via malformed .okular files (annotated document archives), which could result in the creation of arbitrary files.

For Debian 8 'Jessie', this problem has been fixed in version 4:4.14.2-2+deb8u1.

We recommend that you upgrade your okular packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
183595	Ubuntu 18.04 ESM : Okular vulnerability (USN-4830-1)	Nessus	Ubuntu Local Security Checks	medium
180749	Oracle Linux 7 : okular (ELSA-2020-1173)	Nessus	Oracle Linux Local Security Checks	medium
143956	NewStart CGSL CORE 5.04 / MAIN 5.04 : okular Vulnerability (NS-SA-2020-0076)	Nessus	NewStart CGSL Local Security Checks	medium
143905	NewStart CGSL CORE 5.05 / MAIN 5.05 : okular Vulnerability (NS-SA-2020-0115)	Nessus	NewStart CGSL Local Security Checks	medium
135826	Scientific Linux Security Update : okular on SL7.x x86_64 (20200407)	Nessus	Scientific Linux Local Security Checks	medium
135350	CentOS 7 : okular (RHSA-2020:1173)	Nessus	CentOS Local Security Checks	medium
135057	RHEL 7 : okular (RHSA-2020:1173)	Nessus	Red Hat Local Security Checks	medium
124214	GLSA-201811-08 : Okular: Directory traversal	Nessus	Gentoo Local Security Checks	medium
123295	openSUSE Security Update : okular (openSUSE-2019-684)	Nessus	SuSE Local Security Checks	medium
120851	Fedora 28 : okular (2018-de7ad09860)	Nessus	Fedora Local Security Checks	medium
120772	Fedora 29 : okular (2018-c504c3072c)	Nessus	Fedora Local Security Checks	medium
117676	Debian DSA-4303-1 : okular - security update	Nessus	Debian Local Security Checks	medium
117643	Debian DLA-1516-1 : okular security update	Nessus	Debian Local Security Checks	medium
117533	Fedora 27 : okular (2018-dbeb27d783)	Nessus	Fedora Local Security Checks	medium
117519	openSUSE Security Update : okular (openSUSE-2018-1006)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2018-1000801

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium