Name: CVE-2017-9408: Missing Release of Resource after Effective Lifetime
Published: 2017-06-02T00:00:00.000Z
Keywords: CVE, CVE-2017-9408, CWE-772, CVSS 6.5, EPSS 0.02387

In Poppler 0.54.0, a memory leak vulnerability was found in the function Object::initArray in Object.cc, which allows attackers to cause a denial of service via a crafted file.

CVSS Details

CVSS 3.0 Base Score: 6.5
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	View advisory ↗	debian-upgrade-poppler	Jan 9, 2018	Jun 2, 2017
Gentoo Linux	View advisory ↗	gentoo-linux-upgrade-app-text-poppler	Jan 18, 2018	Jun 2, 2017
Huawei Euleros 2_0_sp2	View advisory ↗	huawei-euleros-2_0_sp2-upgrade-popplerhuawei-euleros-2_0_sp2-upgrade-poppler-glibhuawei-euleros-2_0_sp2-upgrade-poppler-qthuawei-euleros-2_0_sp2-upgrade-poppler-utils	Dec 4, 2019	Jun 2, 2017
Huawei Euleros 2_0_sp3	View advisory ↗	huawei-euleros-2_0_sp3-upgrade-popplerhuawei-euleros-2_0_sp3-upgrade-poppler-glibhuawei-euleros-2_0_sp3-upgrade-poppler-qthuawei-euleros-2_0_sp3-upgrade-poppler-utils	Apr 16, 2020	Jun 2, 2017
Huawei Euleros 2_0_sp5	View advisory ↗	huawei-euleros-2_0_sp5-upgrade-popplerhuawei-euleros-2_0_sp5-upgrade-poppler-glibhuawei-euleros-2_0_sp5-upgrade-poppler-qthuawei-euleros-2_0_sp5-upgrade-poppler-utils	Feb 3, 2021	Jun 2, 2017
Oracle Solaris	View advisory ↗	oracle-solaris-11-4-upgrade-entire-11-4-11-4-0-0-1-15-0	Oct 19, 2018	Jun 2, 2017
Redhat_linux	View advisory ↗	no-fix-redhat-rpm-package	Jul 9, 2025	Apr 24, 2017
Suse	—	suse-upgrade-libpoppler-cpp0suse-upgrade-libpoppler-develsuse-upgrade-libpoppler-glib-develsuse-upgrade-libpoppler-glib8suse-upgrade-libpoppler-qt4-4suse-upgrade-libpoppler-qt4-develsuse-upgrade-libpoppler44suse-upgrade-libpoppler60suse-upgrade-poppler-toolssuse-upgrade-typelib-1_0-poppler-0_18	Jul 28, 2017	Jun 2, 2017
Ubuntu	View advisory ↗	ubuntu-upgrade-libpoppler-cpp0ubuntu-upgrade-libpoppler-cpp0v5ubuntu-upgrade-libpoppler-glib8ubuntu-upgrade-libpoppler-qt4-4ubuntu-upgrade-libpoppler-qt5-1ubuntu-upgrade-libpoppler44ubuntu-upgrade-libpoppler58ubuntu-upgrade-libpoppler61ubuntu-upgrade-libpoppler64ubuntu-upgrade-poppler-utils	Jul 7, 2017	Jun 2, 2017

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub