An issue was discovered in PoDoFo 0.9.5. There is an Excessive Recursion in the PdfPagesTree::GetPageNode() function of PdfPagesTree.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file, a related issue to CVE-2017-8054.
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Podofo | Podofo_project | 0.9.5 (including) | 0.9.5 (including) |
| Libpodofo | Ubuntu | artful | * |
| Libpodofo | Ubuntu | bionic | * |
| Libpodofo | Ubuntu | cosmic | * |
| Libpodofo | Ubuntu | trusty | * |
| Libpodofo | Ubuntu | xenial | * |