An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-demosUpgrade poppler-glibUpgrade poppler-debuginfoUpgrade poppler-glib-develUpgrade popplerUpgrade poppler-utilsUpgrade poppler-cppUpgrade poppler-cpp-develUpgrade poppler-develUpgrade poppler-qtUpgrade poppler-qt-devel | Apr 27, 2020 | Nov 2, 2018 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Nov 2, 2018 |
| Centos_linux | — | Upgrade poppler-glib-develUpgrade poppler-qt-develUpgrade poppler-utilsUpgrade evince-develUpgrade poppler-develUpgrade popplerUpgrade poppler-qtUpgrade poppler-utils-debuginfoUpgrade poppler-glib-debuginfoUpgrade okular-partUpgrade evinceUpgrade evince-debuginfoUpgrade poppler-cpp-develUpgrade poppler-cppUpgrade evince-dviUpgrade okular-libsUpgrade poppler-demosUpgrade poppler-cpp-debuginfoUpgrade evince-browser-pluginUpgrade okularUpgrade okular-develUpgrade poppler-qt5-debuginfoUpgrade poppler-glibUpgrade evince-libsUpgrade evince-nautilusUpgrade poppler-debugsourceUpgrade poppler-debuginfoUpgrade okular-debuginfo | Aug 28, 2019 | Nov 2, 2018 |
| Debian | — | Upgrade poppler | Sep 27, 2022 | Nov 2, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-utilsUpgrade poppler-qtUpgrade popplerUpgrade poppler-glib | Sep 16, 2021 | Nov 2, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-utilsUpgrade poppler-glibUpgrade popplerUpgrade poppler-qt | Nov 19, 2019 | Nov 2, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade popplerUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-qt | Nov 19, 2019 | Nov 2, 2018 |
| Huawei Euleros 2_0_sp9 | — | Upgrade poppler-helpUpgrade popplerUpgrade poppler-cpp | Feb 8, 2021 | Nov 2, 2018 |
| Oracle_linux | — | Upgrade evince-browser-pluginUpgrade poppler-cppUpgrade poppler-cpp-develUpgrade popplerUpgrade evince-nautilusUpgrade poppler-utilsUpgrade evince-dviUpgrade evince-develUpgrade poppler-glibUpgrade okular-libsUpgrade evince-libsUpgrade poppler-develUpgrade okularUpgrade okular-partUpgrade okular-develUpgrade poppler-glib-develUpgrade poppler-qt5-develUpgrade poppler-qt-develUpgrade poppler-qtUpgrade poppler-demosUpgrade poppler-qt5Upgrade evince | Jul 21, 2020 | Nov 1, 2018 |
| Redhat_linux | — | Upgrade poppler-demosUpgrade evinceUpgrade okular-libsUpgrade poppler-cppUpgrade evince-develUpgrade poppler-cpp-develUpgrade evince-browser-pluginUpgrade popplerUpgrade poppler-utilsUpgrade poppler-qt5-debuginfoUpgrade evince-libsUpgrade poppler-qt5Upgrade poppler-debugsourceUpgrade poppler-develUpgrade poppler-cpp-debuginfoUpgrade evince-dviUpgrade poppler-utils-debuginfoUpgrade okular-debuginfoUpgrade poppler-glib-develUpgrade evince-nautilusUpgrade poppler-glib-debuginfoNo solution existsUpgrade poppler-glibUpgrade evince-debuginfoUpgrade okularUpgrade poppler-qt5-develUpgrade poppler-debuginfoUpgrade poppler-qt-develUpgrade okular-partUpgrade okular-develUpgrade poppler-qt | Aug 7, 2019 | Nov 2, 2018 |
| Suse | — | Upgrade libpoppler73-32bitUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-cpp0Upgrade libpoppler-glib8Upgrade libpoppler73Upgrade libpoppler-glib-develUpgrade libpoppler-develUpgrade poppler-tools | Dec 2, 2021 | Nov 2, 2018 |
| Ubuntu | — | Upgrade poppler-utilsUpgrade libpoppler85Upgrade libpoppler79Upgrade libpoppler73Upgrade libpoppler58 | Jun 27, 2019 | Nov 2, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub