An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-debuginfoUpgrade poppler-demosUpgrade poppler-glibUpgrade poppler-glib-develUpgrade poppler-cpp-develUpgrade poppler-qt-develUpgrade popplerUpgrade poppler-utilsUpgrade poppler-cppUpgrade poppler-qtUpgrade poppler-devel | Apr 27, 2020 | Nov 2, 2018 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Nov 2, 2018 |
| Centos_linux | — | Upgrade poppler-debuginfoUpgrade okular-debuginfoUpgrade evince-libsUpgrade okular-develUpgrade evince-dviUpgrade poppler-debugsourceUpgrade evince-nautilusUpgrade evince-browser-pluginUpgrade poppler-cpp-debuginfoUpgrade poppler-qt5-debuginfoUpgrade poppler-glibUpgrade poppler-demosUpgrade okular-libsUpgrade okularUpgrade poppler-cpp-develUpgrade poppler-qt-develUpgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-glib-develUpgrade poppler-develUpgrade okular-partUpgrade evince-debuginfoUpgrade poppler-cppUpgrade poppler-utils-debuginfoUpgrade evinceUpgrade popplerUpgrade evince-develUpgrade poppler-glib-debuginfo | Aug 28, 2019 | Nov 2, 2018 |
| Debian | — | Upgrade poppler | Sep 27, 2022 | Nov 2, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-qtUpgrade poppler-glibUpgrade popplerUpgrade poppler-utils | Sep 16, 2021 | Nov 2, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-utilsUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler | Nov 19, 2019 | Nov 2, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-utilsUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler | Nov 19, 2019 | Nov 2, 2018 |
| Huawei Euleros 2_0_sp9 | — | Upgrade poppler-helpUpgrade poppler-cppUpgrade poppler | Feb 8, 2021 | Nov 2, 2018 |
| Oracle_linux | — | Upgrade evinceUpgrade poppler-qt-develUpgrade okular-develUpgrade poppler-glib-develUpgrade okular-partUpgrade poppler-demosUpgrade poppler-qt5Upgrade okularUpgrade poppler-qtUpgrade poppler-develUpgrade poppler-qt5-develUpgrade evince-develUpgrade evince-dviUpgrade poppler-glibUpgrade okular-libsUpgrade evince-libsUpgrade evince-nautilusUpgrade poppler-utilsUpgrade poppler-cppUpgrade poppler-cpp-develUpgrade evince-browser-pluginUpgrade poppler | Jul 21, 2020 | Nov 1, 2018 |
| Redhat_linux | — | Upgrade poppler-qtNo solution existsUpgrade poppler-cpp-debuginfoUpgrade poppler-glib-debuginfoUpgrade okular-debuginfoUpgrade poppler-debugsourceUpgrade okularUpgrade okular-develUpgrade poppler-qt5-develUpgrade poppler-glibUpgrade poppler-debuginfoUpgrade evince-nautilusUpgrade poppler-qt5Upgrade poppler-qt-develUpgrade okular-partUpgrade poppler-develUpgrade evince-dviUpgrade evince-debuginfoUpgrade poppler-glib-develUpgrade poppler-utils-debuginfoUpgrade evince-libsUpgrade okular-libsUpgrade evinceUpgrade poppler-cppUpgrade popplerUpgrade poppler-qt5-debuginfoUpgrade poppler-demosUpgrade poppler-utilsUpgrade evince-develUpgrade evince-browser-pluginUpgrade poppler-cpp-devel | Aug 7, 2019 | Nov 2, 2018 |
| Suse | — | Upgrade libpoppler-develUpgrade libpoppler73Upgrade poppler-toolsUpgrade libpoppler-glib8Upgrade libpoppler-glib-develUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-cpp0Upgrade libpoppler73-32bit | Dec 2, 2021 | Nov 2, 2018 |
| Ubuntu | — | Upgrade libpoppler79Upgrade libpoppler58Upgrade libpoppler73Upgrade libpoppler85Upgrade poppler-utils | Jun 27, 2019 | Nov 2, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub