CVE-2017-8053
PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted...
PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (PdfParser.cpp).
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (PdfParser.cpp).
- Record
CVE-2017-8053- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-835
- Updated
- 2026-11-02
CVE List No score
PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (PdfParser.cpp).
- Record
CVE-2017-8053- Updated
- 2026-11-02
EUVDEUVD-2017-17016 No score
PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (PdfParser.cpp).
- Record
EUVD-2017-17016- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p7r7-9m7f-qm95
PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted...
PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (PdfParser.cpp).
- Record
GHSA-p7r7-9m7f-qm95- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-835
- Updated
- 2026-11-02
OSV
PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (PdfParser.cpp).
- Record
CVE-2017-8053- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2017-8053
PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (PdfParser.cpp).
- Record
DEBIAN-CVE-2017-8053- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2017-8053
PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (PdfParser.cpp).
- Record
UBUNTU-CVE-2017-8053- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libpodofoDebian:12 |
before 0.9.6+dfsg-3 | 0.9.6+dfsg-3 |
libpodofoDebian:13 |
before 0.9.6+dfsg-3 | 0.9.6+dfsg-3 |
libpodofoDebian:14 |
before 0.9.6+dfsg-3 | 0.9.6+dfsg-3 |
libpodofoUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 0.9.0-1.1ubuntu10.9.0-1.20.9.0-1.2ubuntu0.1~esm10.9.0-1.2ubuntu0.1~esm3 |
None known |
libpodofoUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 0.9.0-1.30.9.3-30.9.3-40.9.3-4ubuntu0.1~esm1 |
None known |
libpodofoUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 0.9.5-60.9.5-80.9.5-8build10.9.5-90.9.5-9ubuntu0.1~esm1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-8053 is a medium vulnerability (CVSS 5.5) in Podofo Project Podofo, published April 22, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.92%, the 60th percentile. Fixed in libpodofo 0.9.6+dfsg-3.