An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPageSlice at PSOutputDev.cc.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-qtUpgrade poppler-develUpgrade poppler-cppUpgrade poppler-qt-develUpgrade poppler-cpp-develUpgrade poppler-utilsUpgrade poppler-demosUpgrade poppler-glibUpgrade poppler-glib-develUpgrade poppler-debuginfoUpgrade poppler | Aug 25, 2020 | Apr 5, 2019 |
| Amazon_linux | — | Upgrade poppler | Jul 18, 2020 | Apr 5, 2019 |
| Centos_linux | — | Upgrade poppler-develUpgrade poppler-debuginfoUpgrade poppler-debugsourceUpgrade popplerUpgrade evince-libsUpgrade evinceUpgrade poppler-utils-debuginfoUpgrade evince-debuginfoUpgrade poppler-qt-develUpgrade poppler-glib-debuginfoUpgrade poppler-demosUpgrade evince-nautilusUpgrade evince-dviUpgrade poppler-cpp-debuginfoUpgrade evince-browser-pluginUpgrade evince-develUpgrade poppler-cppUpgrade poppler-glib-develUpgrade poppler-cpp-develUpgrade poppler-qtUpgrade poppler-qt5-debuginfoUpgrade poppler-glibUpgrade poppler-utils | Sep 12, 2019 | Apr 5, 2019 |
| Debian | — | Upgrade poppler | Oct 18, 2019 | Apr 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-utilsUpgrade poppler-qtUpgrade popplerUpgrade poppler-glib | Sep 16, 2021 | Apr 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade popplerUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler-utils | Apr 30, 2021 | Apr 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-glibUpgrade poppler-utilsUpgrade popplerUpgrade poppler-qt | Mar 24, 2021 | Apr 5, 2019 |
| Oracle_linux | — | Upgrade evince-develUpgrade poppler-qt-develUpgrade poppler-qt5-develUpgrade poppler-qt5Upgrade evinceUpgrade poppler-cppUpgrade evince-libsUpgrade poppler-cpp-develUpgrade poppler-develUpgrade poppler-qtUpgrade poppler-demosUpgrade poppler-glib-develUpgrade evince-nautilusUpgrade poppler-utilsUpgrade evince-dviUpgrade poppler-glibUpgrade evince-browser-pluginUpgrade poppler | Jul 21, 2020 | Apr 3, 2019 |
| Redhat_linux | — | Upgrade poppler-develUpgrade poppler-qt5Upgrade poppler-cppUpgrade poppler-demosUpgrade evince-develUpgrade poppler-glib-develUpgrade evince-browser-pluginUpgrade poppler-debugsourceUpgrade evince-nautilusUpgrade poppler-cpp-debuginfoUpgrade poppler-qt5-develUpgrade poppler-qt5-debuginfoUpgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-cpp-develUpgrade poppler-debuginfoUpgrade poppler-glib-debuginfoUpgrade evince-dviUpgrade evince-libsUpgrade poppler-glibUpgrade evinceUpgrade poppler-qt-develUpgrade popplerUpgrade poppler-utils-debuginfoUpgrade evince-debuginfo | Sep 12, 2019 | Apr 5, 2019 |
| Suse | — | Upgrade libpoppler-develUpgrade libpoppler-glib8Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib-develUpgrade libpoppler73Upgrade libpoppler-cpp0Upgrade poppler-toolsUpgrade libpoppler73-32bit | Dec 2, 2021 | Apr 5, 2019 |
| Ubuntu | — | Upgrade poppler-utilsUpgrade libpoppler73Upgrade libpoppler58 | Nov 27, 2020 | Apr 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub