CVE-2017-9208 on Ubuntu 18.04 LTS (bionic) - negligible.
Description:
libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF document, related to releaseResolved functions, aka qpdf-infiniteloop1.