Debian/poppler: medium 6.5
In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack.
Action: Upgrade poppler to 0.71.0-4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.71.0-4 | - |
Fixed versions
| 0.71.0-4 |
Sources
- osv: DEBIAN-CVE-2018-16646#Debian:13/poppler
- https://security-tracker.debian.org/tracker/CVE-2018-16646
published · modified · JSON