In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-cpp-develUpgrade poppler-demosUpgrade poppler-qt-develUpgrade poppler-cppUpgrade poppler-qtUpgrade poppler-develUpgrade poppler-glibUpgrade poppler-utilsUpgrade popplerUpgrade poppler-glib-develUpgrade poppler-debuginfo | Apr 27, 2020 | Sep 6, 2018 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Sep 6, 2018 |
| Centos_linux | — | Upgrade evince-browser-pluginUpgrade poppler-cppUpgrade poppler-qt-develUpgrade poppler-cpp-develUpgrade evince-develUpgrade okular-develUpgrade poppler-develUpgrade evinceUpgrade poppler-utilsUpgrade okular-libsUpgrade evince-libsUpgrade poppler-demosUpgrade evince-nautilusUpgrade okular-partUpgrade evince-debuginfoUpgrade poppler-glibUpgrade popplerUpgrade poppler-qtUpgrade poppler-debuginfoUpgrade evince-dviUpgrade okularUpgrade okular-debuginfoUpgrade poppler-glib-devel | Aug 28, 2019 | Sep 6, 2018 |
| Debian | — | Upgrade poppler | Feb 19, 2019 | Sep 6, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-qtUpgrade poppler-utilsUpgrade popplerUpgrade poppler-glib | Nov 19, 2019 | Sep 6, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-qtUpgrade poppler-glibUpgrade popplerUpgrade poppler-utils | Nov 19, 2019 | Sep 6, 2018 |
| Huawei Euleros 2_0_sp9 | — | Upgrade popplerUpgrade poppler-cppUpgrade poppler-help | Feb 8, 2021 | Sep 6, 2018 |
| Oracle_linux | — | Upgrade evince-browser-pluginUpgrade okular-develUpgrade evince-nautilusUpgrade poppler-demosUpgrade okularUpgrade okular-libsUpgrade poppler-develUpgrade evince-libsUpgrade poppler-glib-develUpgrade popplerUpgrade poppler-qtUpgrade poppler-cpp-develUpgrade poppler-qt-develUpgrade evince-dviUpgrade poppler-glibUpgrade okular-partUpgrade evinceUpgrade evince-develUpgrade poppler-utilsUpgrade poppler-cpp | Jul 21, 2020 | Aug 28, 2018 |
| Redhat_linux | — | Upgrade evince-dviUpgrade evince-nautilusUpgrade evince-debuginfoUpgrade okular-partUpgrade okularUpgrade poppler-glib-develUpgrade okular-debuginfoUpgrade popplerUpgrade poppler-debuginfoNo solution existsUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler-cpp-develUpgrade evinceUpgrade okular-develUpgrade evince-develUpgrade poppler-utilsUpgrade evince-libsUpgrade poppler-cppUpgrade poppler-develUpgrade poppler-qt-develUpgrade poppler-demosUpgrade evince-browser-pluginUpgrade okular-libs | Aug 7, 2019 | Sep 6, 2018 |
| Suse | — | Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-develUpgrade libpoppler-glib-develUpgrade libpoppler-cpp0Upgrade libpoppler-glib8Upgrade libpoppler73Upgrade libpoppler73-32bitUpgrade poppler-tools | Dec 2, 2021 | Sep 6, 2018 |
| Ubuntu | — | Upgrade libpoppler58Upgrade poppler-utilsUpgrade libpoppler44Upgrade libpoppler79Upgrade libpoppler73 | Dec 12, 2018 | Sep 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub