In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-glib-develUpgrade poppler-utilsUpgrade poppler-debuginfoUpgrade poppler-glibUpgrade popplerUpgrade poppler-develUpgrade poppler-cppUpgrade poppler-cpp-develUpgrade poppler-qt-develUpgrade poppler-qtUpgrade poppler-demos | Apr 27, 2020 | Sep 6, 2018 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Sep 6, 2018 |
| Centos_linux | — | Upgrade poppler-glib-develUpgrade poppler-glibUpgrade okular-partUpgrade evince-nautilusUpgrade okular-debuginfoUpgrade evince-debuginfoUpgrade okularUpgrade poppler-debuginfoUpgrade poppler-qtUpgrade evince-dviUpgrade popplerUpgrade evince-develUpgrade poppler-demosUpgrade evince-libsUpgrade okular-develUpgrade poppler-develUpgrade evince-browser-pluginUpgrade poppler-cppUpgrade poppler-cpp-develUpgrade evinceUpgrade poppler-qt-develUpgrade poppler-utilsUpgrade okular-libs | Aug 28, 2019 | Sep 6, 2018 |
| Debian | — | Upgrade poppler | Feb 19, 2019 | Sep 6, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-glibUpgrade poppler-utilsUpgrade popplerUpgrade poppler-qt | Nov 19, 2019 | Sep 6, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade popplerUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler-qt | Nov 19, 2019 | Sep 6, 2018 |
| Huawei Euleros 2_0_sp9 | — | Upgrade poppler-helpUpgrade popplerUpgrade poppler-cpp | Feb 8, 2021 | Sep 6, 2018 |
| Oracle_linux | — | Upgrade okularUpgrade poppler-demosUpgrade poppler-develUpgrade okular-develUpgrade evince-browser-pluginUpgrade okular-libsUpgrade evince-libsUpgrade evince-nautilusUpgrade evince-dviUpgrade poppler-qtUpgrade poppler-qt-develUpgrade poppler-glib-develUpgrade poppler-glibUpgrade poppler-cppUpgrade poppler-cpp-develUpgrade poppler-utilsUpgrade evinceUpgrade evince-develUpgrade popplerUpgrade okular-part | Jul 21, 2020 | Aug 28, 2018 |
| Redhat_linux | — | No solution existsUpgrade okularUpgrade evince-dviUpgrade poppler-qtUpgrade popplerUpgrade evince-debuginfoUpgrade okular-partUpgrade poppler-glibUpgrade okular-debuginfoUpgrade evince-nautilusUpgrade poppler-glib-develUpgrade poppler-debuginfoUpgrade evince-libsUpgrade poppler-cppUpgrade evinceUpgrade poppler-demosUpgrade poppler-utilsUpgrade evince-browser-pluginUpgrade evince-develUpgrade poppler-develUpgrade poppler-cpp-develUpgrade okular-libsUpgrade poppler-qt-develUpgrade okular-devel | Aug 7, 2019 | Sep 6, 2018 |
| Suse | — | Upgrade libpoppler73Upgrade libpoppler73-32bitUpgrade libpoppler-glib8Upgrade libpoppler-cpp0Upgrade poppler-toolsUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-develUpgrade libpoppler-glib-devel | Dec 2, 2021 | Sep 6, 2018 |
| Ubuntu | — | Upgrade libpoppler58Upgrade libpoppler44Upgrade libpoppler79Upgrade poppler-utilsUpgrade libpoppler73 | Dec 12, 2018 | Sep 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub