Description
FontInfoScanner::scanFonts in FontInfo.cc in Poppler 0.75.0 has infinite recursion, leading to a call to the error function in Error.cc.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | poppler | 0.85.0-2 | — |
| Debian 13 | poppler | 0.85.0-2 | — |
| Debian 12 | poppler | 0.85.0-2 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | poppler | No fix yet | — |
| Ubuntu Pro 16.04 LTS | poppler | No fix yet | — |
References
- https://gitlab.freedesktop.org/poppler/poppler/issues/752
- https://research.loginsoft.com/bugs/1508/
- FEDORA-2019-1ddce0c095 vendor-advisory
- FEDORA-2019-95eb49ef49 vendor-advisory
- FEDORA-2019-3193a75b06 vendor-advisory