Description
There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5. A crafted input will lead to a remote denial of service attack. Later Ubuntu packages such as for Poppler 0.41.0 are not affected.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://bugs.freedesktop.org/show_bug.cgi?id=106408 ↗
- https://lists.debian.org/debian-lts-announce/2018/10/msg00024.html ↗
- https://access.redhat.com/errata/RHSA-2018:3505 ↗
- https://usn.ubuntu.com/3647-1/ ↗
- https://access.redhat.com/errata/RHSA-2018:3140 ↗
- https://access.redhat.com/errata/RHBA-2019:0327 ↗