poppler mishandles PDF password length, enabling denial of service
Original title: USN-8950-1: poppler vulnerability
Ubuntu notice USN-8950-1 says an attacker could crash poppler while decrypting certain encrypted PDF files.
Ubuntu published USN-8950-1 for a poppler vulnerability. The library incorrectly handled the password length limit when decrypting certain encrypted PDF files. An attacker could possibly use the issue to cause a denial of service. The notice snippet does not name a CVE, affected versions, or a fixed release.
Unconfirmed: Affected and fixed versions are not stated in the notice snippet.
- The flaw is in password-length handling for encrypted PDFs.
- Impact described is possible denial of service only.
Impact: Possible denial of service while decrypting PDFs
| Product | Affected |
|---|---|
| poppler | — |
- 1.Apply the Ubuntu update for USN-8950-1 when available.
From the original article
It was discovered that poppler incorrectly handled the password length limit when decrypting certain encrypted PDF files. An attacker could possibly use this issue to cause a denial of service.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.