A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lack of a check for the dict data type, as demonstrated by use of the FileSpec class (in FileSpec.cc) in pdfdetach.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-qt-develUpgrade poppler-cppUpgrade poppler-demosUpgrade poppler-debuginfoUpgrade poppler-develUpgrade poppler-qtUpgrade popplerUpgrade poppler-glibUpgrade poppler-glib-develUpgrade poppler-cpp-develUpgrade poppler-utils | Apr 27, 2020 | Jan 1, 2019 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Jan 1, 2019 |
| Centos_linux | — | Upgrade popplerUpgrade okularUpgrade poppler-glibUpgrade evince-dviUpgrade evince-libsUpgrade poppler-glib-debuginfoUpgrade okular-libsUpgrade evinceUpgrade poppler-cppUpgrade poppler-demosUpgrade okular-partUpgrade evince-browser-pluginUpgrade okular-debuginfoUpgrade poppler-debugsourceUpgrade poppler-utils-debuginfoUpgrade poppler-glib-develUpgrade poppler-qt5-debuginfoUpgrade okular-develUpgrade evince-develUpgrade poppler-debuginfoUpgrade poppler-utilsUpgrade evince-nautilusUpgrade evince-debuginfoUpgrade poppler-develUpgrade poppler-cpp-debuginfoUpgrade poppler-cpp-develUpgrade poppler-qt-develUpgrade poppler-qt | Aug 28, 2019 | Jan 1, 2019 |
| Debian | — | Upgrade poppler | Oct 2, 2019 | Jan 1, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-qtUpgrade popplerUpgrade poppler-glibUpgrade poppler-utils | Sep 16, 2021 | Jan 1, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-glibUpgrade poppler-qtUpgrade popplerUpgrade poppler-utils | Nov 19, 2019 | Jan 1, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade popplerUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler-utils | Nov 19, 2019 | Jan 1, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade popplerUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler-utils | Feb 26, 2020 | Jan 1, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/poppler to version 0.75.0-11.4.10.0.1.2.0 on Solaris 11.4 | Jun 26, 2019 | Jan 1, 2019 |
| Oracle_linux | — | Upgrade poppler-qt5-develUpgrade poppler-glib-develUpgrade okular-partUpgrade poppler-qtUpgrade okular-develUpgrade poppler-demosUpgrade poppler-develUpgrade poppler-glibUpgrade poppler-utilsUpgrade evince-develUpgrade poppler-qt5Upgrade evince-browser-pluginUpgrade evince-nautilusUpgrade poppler-cpp-develUpgrade popplerUpgrade okularUpgrade evinceUpgrade evince-dviUpgrade poppler-cppUpgrade evince-libsUpgrade okular-libsUpgrade poppler-qt-devel | Jul 21, 2020 | Dec 28, 2018 |
| Redhat_linux | — | Upgrade poppler-glib-debuginfoUpgrade okular-develUpgrade poppler-cpp-debuginfoUpgrade evince-debuginfoUpgrade poppler-demosUpgrade poppler-qt-develNo solution existsUpgrade evinceUpgrade poppler-debugsourceUpgrade poppler-debuginfoUpgrade poppler-qt5-develUpgrade evince-dviUpgrade poppler-qt5Upgrade okular-debuginfoUpgrade poppler-develUpgrade poppler-glibUpgrade okular-partUpgrade poppler-utils-debuginfoUpgrade okularUpgrade evince-develUpgrade poppler-cppUpgrade poppler-qt5-debuginfoUpgrade evince-libsUpgrade evince-nautilusUpgrade okular-libsUpgrade poppler-qtUpgrade popplerUpgrade poppler-utilsUpgrade evince-browser-pluginUpgrade poppler-glib-develUpgrade poppler-cpp-devel | Aug 7, 2019 | Jan 1, 2019 |
| Suse | — | Upgrade libpoppler73Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib8Upgrade libpoppler-glib-develUpgrade libpoppler73-32bitUpgrade libpoppler-cpp0Upgrade libpoppler-develUpgrade poppler-tools | Dec 2, 2021 | Jan 1, 2019 |
| Ubuntu | — | Upgrade libpoppler73Upgrade poppler-utilsUpgrade libpoppler58Upgrade libpoppler44Upgrade libpoppler79 | Jan 31, 2019 | Jan 1, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub