An issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating a filename of an embedded file before constructing a save path.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-debuginfoUpgrade popplerUpgrade poppler-glibUpgrade poppler-qt-develUpgrade poppler-qtUpgrade poppler-develUpgrade poppler-glib-develUpgrade poppler-cppUpgrade poppler-cpp-develUpgrade poppler-utilsUpgrade poppler-demos | Apr 27, 2020 | Nov 7, 2018 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Nov 7, 2018 |
| Centos_linux | — | Upgrade popplerUpgrade evince-libsUpgrade okular-libsUpgrade poppler-glibUpgrade poppler-debuginfoUpgrade okularUpgrade okular-partUpgrade poppler-demosUpgrade okular-develUpgrade evince-nautilusUpgrade okular-debuginfoUpgrade evince-dviUpgrade evinceUpgrade poppler-glib-develUpgrade evince-browser-pluginUpgrade poppler-qtUpgrade poppler-cppUpgrade evince-develUpgrade evince-debuginfoUpgrade poppler-qt-develUpgrade poppler-develUpgrade poppler-cpp-develUpgrade poppler-utils | Aug 28, 2019 | Nov 7, 2018 |
| Debian | — | Upgrade poppler | Jul 30, 2024 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade popplerUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler-utils | Sep 16, 2021 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-utilsUpgrade poppler-glibUpgrade popplerUpgrade poppler-qt | Nov 19, 2019 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-qtUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler | Nov 19, 2019 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp9 | — | Upgrade poppler-helpUpgrade popplerUpgrade poppler-cpp | Feb 8, 2021 | Nov 7, 2018 |
| Oracle_linux | — | Upgrade evince-develUpgrade evince-browser-pluginUpgrade poppler-cppUpgrade poppler-qt-develUpgrade poppler-develUpgrade evinceUpgrade poppler-cpp-develUpgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-glib-develUpgrade poppler-demosUpgrade okular-develUpgrade okularUpgrade okular-libsUpgrade evince-dviUpgrade popplerUpgrade poppler-glibUpgrade evince-nautilusUpgrade evince-libsUpgrade okular-part | Jul 21, 2020 | Nov 6, 2018 |
| Redhat_linux | — | Upgrade poppler-debuginfoUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-glib-develUpgrade evince-dviUpgrade okular-libsUpgrade evince-browser-pluginUpgrade evinceUpgrade popplerUpgrade evince-libsUpgrade poppler-cppUpgrade evince-debuginfoUpgrade evince-develUpgrade poppler-develUpgrade poppler-demosUpgrade poppler-cpp-develUpgrade evince-nautilusUpgrade okular-partUpgrade okularUpgrade poppler-qt-develUpgrade okular-debuginfoUpgrade okular-develUpgrade poppler-qt | Aug 7, 2019 | Nov 7, 2018 |
| Suse | — | Upgrade libpoppler73Upgrade poppler-toolsUpgrade libpoppler73-32bitUpgrade libpoppler-develUpgrade libpoppler-glib8Upgrade libpoppler-cpp0Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib-devel | Dec 2, 2021 | Nov 7, 2018 |
| Ubuntu | — | Upgrade libpoppler44Upgrade libpoppler73Upgrade libpoppler58Upgrade libpoppler79Upgrade poppler-utils | Dec 12, 2018 | Nov 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub