| Package | Affected versions | Patched versions |
|---|---|---|
| poppler | < 0.41.0 | 0.41.0 |
| ansible tower | = 3.3 |
There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5. A crafted input will lead to a remote denial of service attack. Later Ubuntu packages such as for Poppler 0.41.0 are not affected.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free