An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service because EmbFile::save2 in FileSpec.cc lacks a stream check before saving an embedded file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-demosUpgrade poppler-debuginfoUpgrade poppler-develUpgrade poppler-qt-develUpgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-cpp-develUpgrade poppler-cppUpgrade popplerUpgrade poppler-glib-develUpgrade poppler-glib | Apr 27, 2020 | Nov 7, 2018 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Nov 7, 2018 |
| Centos_linux | — | Upgrade evince-develUpgrade evince-dviUpgrade evinceUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler-glib-develUpgrade okular-debuginfoUpgrade poppler-utilsUpgrade okular-partUpgrade poppler-cpp-develUpgrade evince-debuginfoUpgrade popplerUpgrade evince-browser-pluginUpgrade evince-nautilusUpgrade poppler-develUpgrade okular-libsUpgrade evince-libsUpgrade poppler-demosUpgrade poppler-cppUpgrade poppler-qt-develUpgrade poppler-debuginfoUpgrade okularUpgrade okular-devel | Aug 28, 2019 | Nov 7, 2018 |
| Debian | — | Upgrade poppler | Mar 12, 2019 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-utilsUpgrade poppler-glibUpgrade popplerUpgrade poppler-qt | Sep 16, 2021 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade popplerUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler-utils | Nov 19, 2019 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade popplerUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-qt | Nov 19, 2019 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-glibUpgrade popplerUpgrade poppler-utilsUpgrade poppler-qt | Feb 26, 2020 | Nov 7, 2018 |
| Oracle_linux | — | Upgrade okular-libsUpgrade evince-develUpgrade evince-browser-pluginUpgrade poppler-glib-develUpgrade evince-dviUpgrade popplerUpgrade poppler-glibUpgrade evinceUpgrade okular-develUpgrade evince-libsUpgrade poppler-utilsUpgrade poppler-develUpgrade okularUpgrade okular-partUpgrade poppler-cpp-develUpgrade poppler-qtUpgrade poppler-cppUpgrade poppler-demosUpgrade poppler-qt-develUpgrade evince-nautilus | Jul 21, 2020 | Nov 6, 2018 |
| Redhat_linux | — | Upgrade popplerUpgrade evinceUpgrade evince-debuginfoUpgrade okularUpgrade evince-dviUpgrade poppler-qt-develUpgrade poppler-debuginfoUpgrade evince-libsUpgrade okular-libsUpgrade poppler-demosUpgrade poppler-utilsUpgrade okular-partUpgrade poppler-qtUpgrade poppler-cppUpgrade okular-develUpgrade poppler-develUpgrade poppler-glib-develUpgrade evince-nautilusUpgrade evince-develUpgrade poppler-glibUpgrade evince-browser-pluginUpgrade okular-debuginfoUpgrade poppler-cpp-devel | Aug 7, 2019 | Nov 7, 2018 |
| Suse | — | Upgrade libpoppler-cpp0Upgrade poppler-toolsUpgrade libpoppler-glib-develUpgrade libpoppler-develUpgrade libpoppler73-32bitUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler73Upgrade libpoppler-glib8 | Dec 2, 2021 | Nov 7, 2018 |
| Ubuntu | — | Upgrade libpoppler58Upgrade libpoppler44Upgrade libpoppler79Upgrade poppler-utilsUpgrade libpoppler73 | Dec 12, 2018 | Nov 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub