PT-2018-3607 · Poppler+4 · Poppler+4

·

CVE-2018-16646

·

Publicado

2018-09-06

·

Atualizado

2023-07-20

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Poppler version 0.68.0
Description The issue is related to the Parser::getObj() function in the Poppler library for rendering PDF files, which can cause infinite recursion when processing a crafted file. This can be exploited by a remote attacker to cause a denial of service.
Recommendations For Poppler version 0.68.0, consider disabling the Parser::getObj() function as a temporary workaround until a patch is available. Restrict access to the Poppler library to minimize the risk of exploitation.

Exploit

Correção

DoS

Infinite Loop

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2021-01284
CESA-2019_2022
CVE-2018-16646
DLA-1562-1
DLA-1562-2
DLA-1562-3
DLA-2287-1
MGASA-2018-0465
OPENSUSE-SU-2021:3854-1
OPENSUSE-SU-2021_3854-1
RHSA-2019:2022
RHSA-2019_2022
SUSE-SU-2021:3854-1
SUSE-SU-2023:2906-1
SUSE-SU-2023:2907-1
USN-3837-1
USN-3837-2

Produtos afetados

Centos
Poppler
Red Hat
Suse
Ubuntu