libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document, related to QPDFObjectHandle::parseInternal, aka qpdf-infiniteloop2.
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Qpdf | Qpdf_project | 6.0.0 (including) | 6.0.0 (including) |
| Qpdf | Ubuntu | trusty | * |
| Qpdf | Ubuntu | upstream | * |
| Qpdf | Ubuntu | xenial | * |
| Qpdf | Ubuntu | zesty | * |