suse · CVE-2017-11627

Quick triage

Priority: high Published: 2021-05-30 13:59:18 UTC Updated: 2026-04-17 16:02:57 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2017-11627 severity important: SUSE including 34 source package names (cups-filters-1.0.58-15.2.1, cups-filters-1.0.58-19.2.3, …), 166 product×package rows across 50 product lines (SUSE CaaS Platform 4.0, SUSE Enterprise Storage 4, … (50 product lines)): Fixed 139, Known Not Affected 27.

Description:

A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the PointerHolder function in PointerHolder.hh, aka an "infinite loop."

cvelogic Threat Intelligence