In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-utilsUpgrade popplerUpgrade poppler-glib-develUpgrade poppler-glibUpgrade poppler-debuginfoUpgrade poppler-cppUpgrade poppler-qtUpgrade poppler-demosUpgrade poppler-qt-develUpgrade poppler-cpp-develUpgrade poppler-devel | Apr 27, 2020 | Sep 6, 2018 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Sep 6, 2018 |
| Centos_linux | — | Upgrade okular-partUpgrade poppler-glibUpgrade popplerUpgrade okularUpgrade evince-dviUpgrade evince-nautilusUpgrade okular-debuginfoUpgrade evince-debuginfoUpgrade poppler-glib-develUpgrade poppler-debuginfoUpgrade poppler-qtUpgrade poppler-cppUpgrade okular-libsUpgrade evince-develUpgrade evinceUpgrade evince-browser-pluginUpgrade poppler-cpp-develUpgrade okular-develUpgrade poppler-utilsUpgrade evince-libsUpgrade poppler-demosUpgrade poppler-develUpgrade poppler-qt-devel | Aug 28, 2019 | Sep 6, 2018 |
| Debian | — | Upgrade poppler | Feb 19, 2019 | Sep 6, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-glibUpgrade popplerUpgrade poppler-utilsUpgrade poppler-qt | Nov 19, 2019 | Sep 6, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-qtUpgrade popplerUpgrade poppler-utilsUpgrade poppler-glib | Nov 19, 2019 | Sep 6, 2018 |
| Huawei Euleros 2_0_sp9 | — | Upgrade poppler-cppUpgrade popplerUpgrade poppler-help | Feb 8, 2021 | Sep 6, 2018 |
| Oracle_linux | — | Upgrade poppler-glib-develUpgrade poppler-glibUpgrade evinceUpgrade poppler-qt-develUpgrade poppler-cppUpgrade okular-partUpgrade popplerUpgrade poppler-utilsUpgrade poppler-cpp-develUpgrade evince-develUpgrade evince-dviUpgrade poppler-qtUpgrade poppler-demosUpgrade okular-develUpgrade okular-libsUpgrade okularUpgrade poppler-develUpgrade evince-libsUpgrade evince-browser-pluginUpgrade evince-nautilus | Jul 21, 2020 | Aug 28, 2018 |
| Redhat_linux | — | Upgrade poppler-qtUpgrade evince-debuginfoUpgrade okular-partUpgrade okularUpgrade evince-nautilusUpgrade evince-dviUpgrade poppler-debuginfoUpgrade poppler-glib-develUpgrade poppler-glibNo solution existsUpgrade okular-debuginfoUpgrade popplerUpgrade poppler-qt-develUpgrade evince-browser-pluginUpgrade poppler-cppUpgrade poppler-demosUpgrade evince-libsUpgrade poppler-utilsUpgrade evinceUpgrade poppler-develUpgrade evince-develUpgrade poppler-cpp-develUpgrade okular-develUpgrade okular-libs | Aug 7, 2019 | Sep 6, 2018 |
| Suse | — | Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib-develUpgrade libpoppler-develUpgrade libpoppler-glib8Upgrade libpoppler73-32bitUpgrade libpoppler-cpp0Upgrade libpoppler73Upgrade poppler-tools | Dec 2, 2021 | Sep 6, 2018 |
| Ubuntu | — | Upgrade libpoppler44Upgrade libpoppler79Upgrade libpoppler73Upgrade poppler-utilsUpgrade libpoppler58 | Dec 12, 2018 | Sep 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub