CVE-2017-14517

What it actually does

NULL pointer dereference in XRef::parseEntry() during crafted PDF parsing causes immediate application crash.

Why it matters to the business

Document-processing workflows using the affected Chainguard packages can be disrupted by denial-of-service crashes until upgraded to the fixed releases.

How an attack unfolds

An attacker crafts a PDF that triggers the NULL dereference in XRef parsing, then delivers the file to a victim who opens it with an affected Poppler-based application, causing an immediate crash.

How to fix it

Upgrade cass-operator-fips and cass-operator-compat-fips to version 1.18.2-r3 or later.

How to confirm the fix worked

Confirm installed package versions meet or exceed the fixed releases and test PDF processing against known triggering documents.

Typical attack path

1. Create malicious PDF exploiting XRef::parseEntry NULL dereference
2. Deliver PDF via email, web download, or file share
3. Victim opens or processes the PDF with vulnerable Poppler
4. Application crashes due to dereference

How to detect it

Inspect application and system logs for segmentation faults or crashes that occur while processing PDF files.

What your security team should do

• Upgrade affected packages to 1.18.2-r3 immediately
• Restrict opening of untrusted PDFs until patched
• Review application crash logs for PDF-related faults