The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to allocate a large memory chunk on the heap, with a size controlled by an attacker, as demonstrated by pdftocairo.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade poppler | Nov 8, 2019 | Jul 22, 2019 |
| Amazon Linux Ami 2 | — | Upgrade poppler-qt-develUpgrade poppler-develUpgrade poppler-glib-develUpgrade poppler-glibUpgrade poppler-cppUpgrade poppler-utilsUpgrade popplerUpgrade poppler-qtUpgrade poppler-debuginfoUpgrade poppler-demosUpgrade poppler-cpp-devel | Aug 25, 2020 | Jul 22, 2019 |
| Amazon_linux | — | Upgrade poppler | Jul 18, 2020 | Jul 22, 2019 |
| Centos_linux | — | Upgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-cpp-debuginfoUpgrade poppler-cpp-develUpgrade evince-libsUpgrade poppler-demosUpgrade evince-nautilusUpgrade poppler-debuginfoUpgrade evince-browser-pluginUpgrade poppler-debugsourceUpgrade poppler-qt5-debuginfoUpgrade poppler-develUpgrade poppler-glib-develUpgrade poppler-utils-debuginfoUpgrade poppler-glib-debuginfoUpgrade popplerUpgrade poppler-cppUpgrade evince-debuginfoUpgrade evinceUpgrade evince-develUpgrade poppler-qt-develUpgrade poppler-glibUpgrade evince-dvi | Sep 12, 2019 | Jul 22, 2019 |
| Debian | — | Upgrade poppler | Oct 18, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-qtUpgrade poppler-glibUpgrade popplerUpgrade poppler-utils | Dec 4, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-utilsUpgrade poppler-qtUpgrade popplerUpgrade poppler-glib | Sep 25, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-dataUpgrade popplerUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-qt | Sep 24, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-glibUpgrade popplerUpgrade poppler-qtUpgrade poppler-utils | Aug 28, 2019 | Jul 22, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/poppler to version 0.79.0-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Jul 22, 2019 |
| Oracle_linux | — | Upgrade poppler-qt5Upgrade popplerUpgrade poppler-demosUpgrade poppler-qt-develUpgrade poppler-qt5-develUpgrade evince-libsUpgrade evinceUpgrade evince-nautilusUpgrade evince-develUpgrade poppler-cppUpgrade evince-browser-pluginUpgrade poppler-glib-develUpgrade poppler-qtUpgrade poppler-cpp-develUpgrade poppler-develUpgrade poppler-glibUpgrade poppler-utilsUpgrade evince-dvi | Jul 21, 2020 | Jul 23, 2019 |
| Redhat_linux | — | No solution existsUpgrade evinceUpgrade poppler-glibUpgrade poppler-debuginfoUpgrade evince-dviUpgrade poppler-qt5-develUpgrade poppler-qt5Upgrade poppler-develUpgrade poppler-qt-develUpgrade poppler-demosUpgrade poppler-debugsourceUpgrade poppler-utils-debuginfoUpgrade evince-debuginfoUpgrade evince-libsUpgrade evince-nautilusUpgrade popplerUpgrade poppler-qtUpgrade evince-browser-pluginUpgrade poppler-cpp-develUpgrade poppler-cppUpgrade poppler-qt5-debuginfoUpgrade evince-develUpgrade poppler-glib-develUpgrade poppler-utilsUpgrade poppler-glib-debuginfoUpgrade poppler-cpp-debuginfo | Sep 12, 2019 | Jul 22, 2019 |
| Suse | — | Upgrade libpoppler-cpp0Upgrade libpoppler-develUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib-develUpgrade libpoppler73Upgrade libpoppler-glib8Upgrade libpoppler73-32bitUpgrade poppler-tools | Dec 2, 2021 | Jul 22, 2019 |
| Ubuntu | — | Upgrade libpoppler58Upgrade libpoppler73Upgrade poppler-utils | Nov 27, 2020 | Jul 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub