In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-qtUpgrade poppler-qt-develUpgrade poppler-develUpgrade poppler-demosUpgrade poppler-cppUpgrade poppler-cpp-develUpgrade popplerUpgrade poppler-glib-develUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler-debuginfo | Apr 27, 2020 | Sep 6, 2018 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Sep 6, 2018 |
| Centos_linux | — | Upgrade okular-partUpgrade evince-nautilusUpgrade poppler-debuginfoUpgrade poppler-glibUpgrade popplerUpgrade poppler-qtUpgrade evince-debuginfoUpgrade okularUpgrade evince-dviUpgrade poppler-glib-develUpgrade okular-debuginfoUpgrade okular-libsUpgrade evince-browser-pluginUpgrade poppler-develUpgrade poppler-demosUpgrade evince-libsUpgrade poppler-utilsUpgrade okular-develUpgrade evinceUpgrade poppler-qt-develUpgrade evince-develUpgrade poppler-cppUpgrade poppler-cpp-devel | Aug 28, 2019 | Sep 6, 2018 |
| Debian | — | Upgrade poppler | Feb 19, 2019 | Sep 6, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler | Nov 19, 2019 | Sep 6, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-qtUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler | Nov 19, 2019 | Sep 6, 2018 |
| Huawei Euleros 2_0_sp9 | — | Upgrade poppler-helpUpgrade poppler-cppUpgrade poppler | Feb 8, 2021 | Sep 6, 2018 |
| Oracle_linux | — | Upgrade poppler-glibUpgrade poppler-qt-develUpgrade poppler-glib-develUpgrade poppler-cppUpgrade okular-partUpgrade evinceUpgrade poppler-utilsUpgrade evince-develUpgrade poppler-cpp-develUpgrade popplerUpgrade evince-dviUpgrade poppler-qtUpgrade evince-nautilusUpgrade poppler-demosUpgrade okularUpgrade okular-develUpgrade poppler-develUpgrade okular-libsUpgrade evince-browser-pluginUpgrade evince-libs | Jul 21, 2020 | Aug 28, 2018 |
| Redhat_linux | — | Upgrade evince-nautilusUpgrade evince-dviUpgrade okularUpgrade poppler-debuginfoUpgrade poppler-qtUpgrade okular-partUpgrade popplerUpgrade poppler-glib-develUpgrade poppler-glibUpgrade okular-debuginfoUpgrade evince-debuginfoNo solution existsUpgrade poppler-develUpgrade evinceUpgrade poppler-cpp-develUpgrade poppler-cppUpgrade okular-develUpgrade evince-browser-pluginUpgrade okular-libsUpgrade poppler-demosUpgrade poppler-utilsUpgrade poppler-qt-develUpgrade evince-libsUpgrade evince-devel | Aug 7, 2019 | Sep 6, 2018 |
| Suse | — | Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-develUpgrade libpoppler-glib-develUpgrade libpoppler-cpp0Upgrade poppler-toolsUpgrade libpoppler-glib8Upgrade libpoppler73-32bitUpgrade libpoppler73 | Dec 2, 2021 | Sep 6, 2018 |
| Ubuntu | — | Upgrade libpoppler73Upgrade libpoppler79Upgrade libpoppler44Upgrade poppler-utilsUpgrade libpoppler58 | Dec 12, 2018 | Sep 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub