In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-cpp-develUpgrade poppler-qt-develUpgrade poppler-qtUpgrade poppler-demosUpgrade poppler-develUpgrade poppler-cppUpgrade poppler-debuginfoUpgrade popplerUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler-glib-devel | Apr 27, 2020 | Sep 6, 2018 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Sep 6, 2018 |
| Centos_linux | — | Upgrade evince-dviUpgrade okularUpgrade evince-nautilusUpgrade poppler-qtUpgrade poppler-glibUpgrade popplerUpgrade evince-debuginfoUpgrade okular-debuginfoUpgrade okular-partUpgrade poppler-debuginfoUpgrade poppler-glib-develUpgrade evince-develUpgrade poppler-qt-develUpgrade poppler-cppUpgrade evinceUpgrade okular-develUpgrade poppler-demosUpgrade evince-libsUpgrade poppler-develUpgrade okular-libsUpgrade evince-browser-pluginUpgrade poppler-cpp-develUpgrade poppler-utils | Aug 28, 2019 | Sep 6, 2018 |
| Debian | — | Upgrade poppler | Feb 19, 2019 | Sep 6, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-qtUpgrade popplerUpgrade poppler-glibUpgrade poppler-utils | Nov 19, 2019 | Sep 6, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-qtUpgrade popplerUpgrade poppler-utilsUpgrade poppler-glib | Nov 19, 2019 | Sep 6, 2018 |
| Huawei Euleros 2_0_sp9 | — | Upgrade poppler-helpUpgrade popplerUpgrade poppler-cpp | Feb 8, 2021 | Sep 6, 2018 |
| Oracle_linux | — | Upgrade okularUpgrade evince-browser-pluginUpgrade poppler-demosUpgrade okular-develUpgrade evince-libsUpgrade poppler-develUpgrade okular-libsUpgrade evince-nautilusUpgrade poppler-cppUpgrade poppler-qt-develUpgrade poppler-glib-develUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler-cpp-develUpgrade popplerUpgrade evinceUpgrade okular-partUpgrade evince-dviUpgrade poppler-utilsUpgrade evince-devel | Jul 21, 2020 | Aug 28, 2018 |
| Redhat_linux | — | Upgrade poppler-qt-develUpgrade poppler-cppUpgrade evince-libsUpgrade poppler-demosUpgrade evince-browser-pluginUpgrade poppler-cpp-develUpgrade poppler-develUpgrade evinceUpgrade poppler-utilsUpgrade okular-libsUpgrade evince-develUpgrade okular-develUpgrade poppler-debuginfoUpgrade okularUpgrade poppler-glibUpgrade okular-partUpgrade poppler-qtUpgrade evince-nautilusUpgrade poppler-glib-develUpgrade evince-debuginfoNo solution existsUpgrade popplerUpgrade okular-debuginfoUpgrade evince-dvi | Aug 7, 2019 | Sep 6, 2018 |
| Suse | — | Upgrade libpoppler73-32bitUpgrade libpoppler73Upgrade libpoppler-glib8Upgrade poppler-toolsUpgrade libpoppler-cpp0Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib-develUpgrade libpoppler-devel | Dec 2, 2021 | Sep 6, 2018 |
| Ubuntu | — | Upgrade libpoppler58Upgrade libpoppler79Upgrade poppler-utilsUpgrade libpoppler44Upgrade libpoppler73 | Dec 12, 2018 | Sep 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub