In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-cppUpgrade poppler-qtUpgrade poppler-develUpgrade poppler-cpp-develUpgrade poppler-qt-develUpgrade poppler-demosUpgrade poppler-glibUpgrade poppler-debuginfoUpgrade poppler-glib-develUpgrade popplerUpgrade poppler-utils | Apr 27, 2020 | Sep 6, 2018 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Sep 6, 2018 |
| Centos_linux | — | Upgrade poppler-debuginfoUpgrade evince-debuginfoUpgrade okular-debuginfoUpgrade evince-nautilusUpgrade evince-dviUpgrade poppler-glib-develUpgrade okularUpgrade poppler-glibUpgrade popplerUpgrade poppler-qtUpgrade okular-partUpgrade poppler-cpp-develUpgrade poppler-cppUpgrade evince-libsUpgrade poppler-demosUpgrade poppler-qt-develUpgrade okular-libsUpgrade evince-develUpgrade evince-browser-pluginUpgrade poppler-develUpgrade poppler-utilsUpgrade okular-develUpgrade evince | Aug 28, 2019 | Sep 6, 2018 |
| Debian | — | Upgrade poppler | Feb 19, 2019 | Sep 6, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-glibUpgrade popplerUpgrade poppler-utilsUpgrade poppler-qt | Nov 19, 2019 | Sep 6, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-qtUpgrade popplerUpgrade poppler-utilsUpgrade poppler-glib | Nov 19, 2019 | Sep 6, 2018 |
| Huawei Euleros 2_0_sp9 | — | Upgrade poppler-helpUpgrade poppler-cppUpgrade poppler | Feb 8, 2021 | Sep 6, 2018 |
| Oracle_linux | — | Upgrade okularUpgrade evince-nautilusUpgrade okular-libsUpgrade poppler-demosUpgrade okular-develUpgrade evince-libsUpgrade evince-browser-pluginUpgrade poppler-develUpgrade poppler-glib-develUpgrade poppler-glibUpgrade okular-partUpgrade evince-develUpgrade poppler-cpp-develUpgrade poppler-cppUpgrade evinceUpgrade poppler-utilsUpgrade poppler-qtUpgrade evince-dviUpgrade popplerUpgrade poppler-qt-devel | Jul 21, 2020 | Aug 28, 2018 |
| Redhat_linux | — | Upgrade poppler-cppUpgrade okular-develUpgrade okular-libsUpgrade poppler-develUpgrade poppler-qt-develUpgrade evince-develUpgrade poppler-cpp-develUpgrade evinceUpgrade poppler-demosUpgrade evince-libsUpgrade evince-browser-pluginUpgrade poppler-utilsUpgrade popplerUpgrade okular-debuginfoUpgrade evince-debuginfoNo solution existsUpgrade evince-dviUpgrade evince-nautilusUpgrade poppler-debuginfoUpgrade poppler-glib-develUpgrade okularUpgrade okular-partUpgrade poppler-glibUpgrade poppler-qt | Aug 7, 2019 | Sep 6, 2018 |
| Suse | — | Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib-develUpgrade libpoppler-develUpgrade libpoppler-cpp0Upgrade libpoppler-glib8Upgrade poppler-toolsUpgrade libpoppler73Upgrade libpoppler73-32bit | Dec 2, 2021 | Sep 6, 2018 |
| Ubuntu | — | Upgrade poppler-utilsUpgrade libpoppler73Upgrade libpoppler79Upgrade libpoppler44Upgrade libpoppler58 | Dec 12, 2018 | Sep 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub