p PatchFirst

CVE-2025-50420

CVE-2025-50420

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).

CVSS 6.5 · Medium · EPSS 0.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • poppler Debian:12

    Versions
    • 22.12.0-2
    • 22.12.0-2+deb12u1
    • 22.12.0-2+deb12u2
    Affected ranges
    • ECOSYSTEM: < 22.12.0-2+deb12u3

    Update to 22.12.0-2+deb12u3

  • poppler Debian:13

    Versions
    • 25.03.0-5
    Affected ranges
    • ECOSYSTEM: < 25.03.0-5+deb13u2

    Update to 25.03.0-5+deb13u2

  • poppler Debian:14

    Versions
    • 25.03.0-5
    Affected ranges
    • ECOSYSTEM: < 25.03.0-6

    Update to 25.03.0-6

  • poppler Ubuntu:Pro:16.04:LTS

    Versions
    • 0.33.0-0ubuntu3
    • 0.37.0-0ubuntu1
    • 0.38.0-0ubuntu1
    • 0.41.0-0ubuntu1
    • 0.41.0-0ubuntu1.1
    • 0.41.0-0ubuntu1.2
    • 0.41.0-0ubuntu1.3
    • 0.41.0-0ubuntu1.4
    • 0.41.0-0ubuntu1.5
    • 0.41.0-0ubuntu1.6
    • 0.41.0-0ubuntu1.7
    • 0.41.0-0ubuntu1.8
    • 0.41.0-0ubuntu1.9
    • 0.41.0-0ubuntu1.10
    • 0.41.0-0ubuntu1.11
    • 0.41.0-0ubuntu1.12
    • 0.41.0-0ubuntu1.13
    • 0.41.0-0ubuntu1.14
    • 0.41.0-0ubuntu1.15
    • 0.41.0-0ubuntu1.16
    • 0.41.0-0ubuntu1.16+esm1
    • 0.41.0-0ubuntu1.16+esm2
    • 0.41.0-0ubuntu1.16+esm3
    • 0.41.0-0ubuntu1.16+esm4
    • 0.41.0-0ubuntu1.16+esm5
    • 0.41.0-0ubuntu1.16+esm6
    • 0.41.0-0ubuntu1.16+esm7
    Affected ranges
    • ECOSYSTEM: < 0.41.0-0ubuntu1.16+esm8

    Update to 0.41.0-0ubuntu1.16+esm8

  • poppler Ubuntu:Pro:18.04:LTS

    Versions
    • 0.57.0-2ubuntu4
    • 0.57.0-2ubuntu5
    • 0.62.0-1ubuntu1
    • 0.62.0-2ubuntu1
    • 0.62.0-2ubuntu2
    • 0.62.0-2ubuntu2.1
    • 0.62.0-2ubuntu2.2
    • 0.62.0-2ubuntu2.4
    • 0.62.0-2ubuntu2.5
    • 0.62.0-2ubuntu2.6
    • 0.62.0-2ubuntu2.7
    • 0.62.0-2ubuntu2.8
    • 0.62.0-2ubuntu2.9
    • 0.62.0-2ubuntu2.10
    • 0.62.0-2ubuntu2.11
    • 0.62.0-2ubuntu2.12
    • 0.62.0-2ubuntu2.13
    • 0.62.0-2ubuntu2.14
    • 0.62.0-2ubuntu2.14+esm1
    • 0.62.0-2ubuntu2.14+esm2
    • 0.62.0-2ubuntu2.14+esm3
    • 0.62.0-2ubuntu2.14+esm4
    • 0.62.0-2ubuntu2.14+esm5
    • 0.62.0-2ubuntu2.14+esm6
    • 0.62.0-2ubuntu2.14+esm7
    Affected ranges
    • ECOSYSTEM: < 0.62.0-2ubuntu2.14+esm8

    Update to 0.62.0-2ubuntu2.14+esm8

  • poppler Ubuntu:Pro:20.04:LTS

    Versions
    • 0.80.0-0ubuntu1
    • 0.80.0-0ubuntu3
    • 0.80.0-0ubuntu4
    • 0.80.0-0ubuntu5
    • 0.85.0-1ubuntu1
    • 0.85.0-1ubuntu3
    • 0.86.1-0ubuntu1
    • 0.86.1-0ubuntu1.1
    • 0.86.1-0ubuntu1.2
    • 0.86.1-0ubuntu1.3
    • 0.86.1-0ubuntu1.4
    • 0.86.1-0ubuntu1.5
    • 0.86.1-0ubuntu1.6
    • 0.86.1-0ubuntu1.7
    • 0.86.1-0ubuntu1.7+esm1
    Affected ranges
    • ECOSYSTEM: < 0.86.1-0ubuntu1.7+esm2

    Update to 0.86.1-0ubuntu1.7+esm2

  • poppler Ubuntu:22.04:LTS

    Versions
    • 21.06.1-1
    • 21.11.0-1~ubuntu2
    • 22.02.0-2
    • 22.02.0-2ubuntu0.1
    • 22.02.0-2ubuntu0.2
    • 22.02.0-2ubuntu0.3
    • 22.02.0-2ubuntu0.4
    • 22.02.0-2ubuntu0.5
    • 22.02.0-2ubuntu0.6
    • 22.02.0-2ubuntu0.7
    • 22.02.0-2ubuntu0.8
    • 22.02.0-2ubuntu0.9
    Affected ranges
    • ECOSYSTEM: < 22.02.0-2ubuntu0.10

    Update to 22.02.0-2ubuntu0.10

  • poppler Ubuntu:24.04:LTS

    Versions
    • 23.08.0-2ubuntu1
    • 23.12.0-1ubuntu2
    • 24.02.0-1ubuntu2
    • 24.02.0-1ubuntu8
    • 24.02.0-1ubuntu9
    • 24.02.0-1ubuntu9.1
    • 24.02.0-1ubuntu9.2
    • 24.02.0-1ubuntu9.3
    • 24.02.0-1ubuntu9.4
    • 24.02.0-1ubuntu9.5
    Affected ranges
    • ECOSYSTEM: < 24.02.0-1ubuntu9.6

    Update to 24.02.0-1ubuntu9.6

Original sources

Check your server →