ByteOS Network

Vulnerability Details :

CVE-2017-7515

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-06 Jun, 2017 | 14:00

Updated At-05 Aug, 2024 | 16:04

poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of-service.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:redhat

Assigner Org ID:53f830b8-0a3f-465b-8143-3b8a9948e749

Published At:06 Jun, 2017 | 14:00

Updated At:05 Aug, 2024 | 16:04

▼CVE Numbering Authority (CNA)

poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of-service.

Affected Products

Vendor

Red Hat, Inc.

Product

poppler

Versions

Affected

through 0.55.0

Problem Types

Type	CWE ID	Description
CWE	CWE-674	CWE-674

Type: CWE

CWE ID: CWE-674

Description: CWE-674

References

Hyperlink	Resource
https://bugs.freedesktop.org/show_bug.cgi?id=101208	x_refsource_CONFIRM

Hyperlink: https://bugs.freedesktop.org/show_bug.cgi?id=101208

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://bugs.freedesktop.org/show_bug.cgi?id=101208	x_refsource_CONFIRM x_transferred

Hyperlink: https://bugs.freedesktop.org/show_bug.cgi?id=101208

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:secalert@redhat.com

Published At:06 Jun, 2017 | 14:29

Updated At:20 Apr, 2025 | 01:37

poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of-service.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	5.5	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:N/A:P

Type: Primary

Version: 3.0

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Type: Primary

Version: 2.0

Base score: 4.3

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:N/I:N/A:P

CPE Matches

freedesktop.org

>>poppler>>Versions up to 0.55.0(inclusive)

cpe:2.3:a:freedesktop:poppler:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-674	Secondary	secalert@redhat.com
CWE-674	Primary	nvd@nist.gov

CWE ID: CWE-674

Type: Secondary

Source: secalert@redhat.com

CWE ID: CWE-674

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://bugs.freedesktop.org/show_bug.cgi?id=101208	secalert@redhat.com	Exploit Vendor Advisory
https://bugs.freedesktop.org/show_bug.cgi?id=101208	af854a3a-2127-422b-91ae-364da2661108	Exploit Vendor Advisory

Hyperlink: https://bugs.freedesktop.org/show_bug.cgi?id=101208

Source: secalert@redhat.com

Resource:

Exploit

Vendor Advisory

Hyperlink: https://bugs.freedesktop.org/show_bug.cgi?id=101208

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Vendor Advisory

Similar CVEs

108Records found

CVE-2007-3409

Matching Score-4

Assigner-Red Hat, Inc.

View Details

Matching Score-4

Assigner-Red Hat, Inc.

CVSS Score-7.5||HIGH

EPSS-12.39% / 93.63%

7 Day CHG~0.00%

Published-26 Jun, 2007 | 18:00

Updated-17 Jan, 2025 | 15:15

Net::DNS before 0.60, a Perl module, allows remote attackers to cause a denial of service (stack consumption) via a malformed compressed DNS packet with self-referencing pointers, which triggers an infinite loop.

Vendor-net-dns n/a Canonical Ltd.Debian GNU/Linux

Product-net\debian_linux ubuntu_linux n/a

CWE ID-CWE-674

Uncontrolled Recursion

CVE-2020-18392

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.25% / 48.30%

7 Day CHG~0.00%

Published-28 May, 2021 | 20:37

Updated-04 Aug, 2024 | 14:00

Stack overflow vulnerability in parse_array Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

Vendor-cesanta n/a

Product-mjs n/a

CWE ID-CWE-674

Uncontrolled Recursion

CVE-2021-46505

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.15% / 35.65%

7 Day CHG~0.00%

Published-27 Jan, 2022 | 20:21

Updated-04 Aug, 2024 | 05:10

Jsish v3.5.0 was discovered to contain a stack overflow via /usr/lib/x86_64-linux-gnu/libasan.so.4+0x5b1e5.

Vendor-jsish n/a

Product-jsish n/a

CWE ID-CWE-674

Uncontrolled Recursion

CVE-2020-36370

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.27% / 49.77%

7 Day CHG~0.00%

Published-28 May, 2021 | 20:38

Updated-04 Aug, 2024 | 17:23

Stack overflow vulnerability in parse_unary Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

Vendor-cesanta n/a

Product-mjs n/a

CWE ID-CWE-674

Uncontrolled Recursion

CVE-2020-36367

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.27% / 49.77%

7 Day CHG~0.00%

Published-28 May, 2021 | 20:38

Updated-04 Aug, 2024 | 17:23

Stack overflow vulnerability in parse_block Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

Vendor-cesanta n/a

Product-mjs n/a

CWE ID-CWE-674

Uncontrolled Recursion

CVE-2020-36366

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.27% / 49.77%

7 Day CHG~0.00%

Published-28 May, 2021 | 20:37

Updated-04 Aug, 2024 | 17:23

Stack overflow vulnerability in parse_value Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

Vendor-cesanta n/a

Product-mjs n/a

CWE ID-CWE-674

Uncontrolled Recursion

CVE-2020-36373

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.27% / 49.77%

7 Day CHG~0.00%

Published-28 May, 2021 | 20:39

Updated-04 Aug, 2024 | 17:23

Stack overflow vulnerability in parse_shifts Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

Vendor-cesanta n/a

Product-mjs n/a

CWE ID-CWE-674

Uncontrolled Recursion

CVE-2019-6291

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.37% / 58.28%

7 Day CHG~0.00%

Published-15 Jan, 2019 | 00:00

Updated-16 Sep, 2024 | 23:45

An issue was discovered in the function expr6 in eval.c in Netwide Assembler (NASM) through 2.14.02. There is a stack exhaustion problem caused by the expr6 function making recursive calls to itself in certain scenarios involving lots of '!' or '+' or '-' characters. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted asm file.

Vendor-nasm n/a

Product-netwide_assembler n/a

CWE ID-CWE-674

Uncontrolled Recursion

CVE-2017-7515

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs