CVE-2018-16646
06.09.2018, 23:29
In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| freedesktop | poppler | 0.68.0 |
| debian | debian_linux | 8.0 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
| canonical | ubuntu_linux | 18.10 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libpoppler-cpp0 |
| ||||||||||||||
| libpoppler-devel |
| ||||||||||||||
| libpoppler-glib-devel |
| ||||||||||||||
| libpoppler-glib8 |
| ||||||||||||||
| libpoppler-qt4-4 |
| ||||||||||||||
| libpoppler60 |
| ||||||||||||||
| libpoppler73 |
| ||||||||||||||
| poppler-tools |
| ||||||||||||||
| typelib-1_0-Poppler-0_18 |
|
Red Hat Enterprise Linux Releases
Red Hat Product | |||
|---|---|---|---|
| evince |
| ||
| evince-browser-plugin |
| ||
| evince-devel |
| ||
| evince-dvi |
| ||
| evince-libs |
| ||
| evince-nautilus |
| ||
| okular |
| ||
| okular-devel |
| ||
| okular-libs |
| ||
| okular-part |
| ||
| poppler |
| ||
| poppler-cpp |
| ||
| poppler-cpp-devel |
| ||
| poppler-demos |
| ||
| poppler-devel |
| ||
| poppler-glib |
| ||
| poppler-glib-devel |
| ||
| poppler-qt |
| ||
| poppler-qt-devel |
| ||
| poppler-utils |
|
Common Weakness Enumeration
References