An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-cpp-develUpgrade poppler-utilsUpgrade popplerUpgrade poppler-glib-develUpgrade poppler-develUpgrade poppler-qt-develUpgrade poppler-cppUpgrade poppler-qtUpgrade poppler-demosUpgrade poppler-glibUpgrade poppler-debuginfo | Apr 27, 2020 | Nov 2, 2018 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Nov 2, 2018 |
| Centos_linux | — | Upgrade poppler-glib-debuginfoUpgrade evince-debuginfoUpgrade poppler-develUpgrade poppler-cpp-develUpgrade poppler-qtUpgrade poppler-utils-debuginfoUpgrade popplerUpgrade poppler-qt-develUpgrade poppler-cppUpgrade evinceUpgrade okular-partUpgrade poppler-glib-develUpgrade evince-develUpgrade poppler-utilsUpgrade okular-libsUpgrade poppler-glibUpgrade okularUpgrade evince-browser-pluginUpgrade okular-develUpgrade poppler-qt5-debuginfoUpgrade evince-libsUpgrade evince-dviUpgrade poppler-cpp-debuginfoUpgrade poppler-debugsourceUpgrade evince-nautilusUpgrade poppler-demosUpgrade poppler-debuginfoUpgrade okular-debuginfo | Aug 28, 2019 | Nov 2, 2018 |
| Debian | — | Upgrade poppler | Sep 27, 2022 | Nov 2, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade popplerUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler-utils | Sep 16, 2021 | Nov 2, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-utilsUpgrade popplerUpgrade poppler-glibUpgrade poppler-qt | Nov 19, 2019 | Nov 2, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-qtUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler | Nov 19, 2019 | Nov 2, 2018 |
| Huawei Euleros 2_0_sp9 | — | Upgrade popplerUpgrade poppler-helpUpgrade poppler-cpp | Feb 8, 2021 | Nov 2, 2018 |
| Oracle_linux | — | Upgrade evince-dviUpgrade evince-develUpgrade evince-nautilusUpgrade poppler-cpp-develUpgrade poppler-cppUpgrade poppler-utilsUpgrade popplerUpgrade evince-browser-pluginUpgrade evince-libsUpgrade okular-libsUpgrade poppler-glibUpgrade okular-develUpgrade evinceUpgrade poppler-qtUpgrade poppler-develUpgrade poppler-qt5-develUpgrade poppler-demosUpgrade poppler-glib-develUpgrade okular-partUpgrade poppler-qt-develUpgrade poppler-qt5Upgrade okular | Jul 21, 2020 | Nov 1, 2018 |
| Redhat_linux | — | Upgrade poppler-cppUpgrade poppler-demosUpgrade popplerUpgrade evince-browser-pluginUpgrade poppler-utilsUpgrade poppler-qt5-debuginfoUpgrade poppler-cpp-develUpgrade evince-develUpgrade okular-libsUpgrade evince-libsUpgrade evinceUpgrade okular-partUpgrade okular-develUpgrade poppler-glibUpgrade poppler-qt5-develUpgrade poppler-glib-develUpgrade poppler-debuginfoUpgrade poppler-develUpgrade poppler-qt5Upgrade poppler-glib-debuginfoUpgrade evince-dviUpgrade poppler-cpp-debuginfoUpgrade poppler-debugsourceUpgrade poppler-qt-develUpgrade evince-nautilusNo solution existsUpgrade poppler-utils-debuginfoUpgrade evince-debuginfoUpgrade okular-debuginfoUpgrade poppler-qtUpgrade okular | Aug 7, 2019 | Nov 2, 2018 |
| Suse | — | Upgrade libpoppler-cpp0Upgrade libpoppler73-32bitUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib-develUpgrade libpoppler73Upgrade libpoppler-glib8Upgrade poppler-toolsUpgrade libpoppler-devel | Dec 2, 2021 | Nov 2, 2018 |
| Ubuntu | — | Upgrade libpoppler85Upgrade poppler-utilsUpgrade libpoppler58Upgrade libpoppler79Upgrade libpoppler73 | Jun 27, 2019 | Nov 2, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub