An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-qtUpgrade popplerUpgrade poppler-cppUpgrade poppler-glib-develUpgrade poppler-qt-develUpgrade poppler-utilsUpgrade poppler-cpp-develUpgrade poppler-develUpgrade poppler-demosUpgrade poppler-glibUpgrade poppler-debuginfo | Apr 27, 2020 | Nov 2, 2018 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Nov 2, 2018 |
| Centos_linux | — | Upgrade poppler-glibUpgrade poppler-demosUpgrade evince-nautilusUpgrade evince-dviUpgrade okular-debuginfoUpgrade poppler-debuginfoUpgrade poppler-debugsourceUpgrade evince-libsUpgrade poppler-cpp-debuginfoUpgrade okular-libsUpgrade poppler-qt5-debuginfoUpgrade okularUpgrade okular-develUpgrade evince-browser-pluginUpgrade poppler-qt-develUpgrade poppler-glib-develUpgrade popplerUpgrade poppler-glib-debuginfoUpgrade poppler-qtUpgrade poppler-utils-debuginfoUpgrade poppler-cpp-develUpgrade poppler-develUpgrade evinceUpgrade evince-debuginfoUpgrade poppler-cppUpgrade evince-develUpgrade poppler-utilsUpgrade okular-part | Aug 28, 2019 | Nov 2, 2018 |
| Debian | — | Upgrade poppler | Sep 27, 2022 | Nov 2, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-qtUpgrade popplerUpgrade poppler-glibUpgrade poppler-utils | Sep 16, 2021 | Nov 2, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler | Nov 19, 2019 | Nov 2, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade popplerUpgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-glib | Nov 19, 2019 | Nov 2, 2018 |
| Huawei Euleros 2_0_sp9 | — | Upgrade poppler-helpUpgrade popplerUpgrade poppler-cpp | Feb 8, 2021 | Nov 2, 2018 |
| Oracle_linux | — | Upgrade poppler-demosUpgrade poppler-qt-develUpgrade poppler-qtUpgrade poppler-glib-develUpgrade poppler-qt5Upgrade poppler-develUpgrade poppler-qt5-develUpgrade okularUpgrade okular-partUpgrade okular-develUpgrade evinceUpgrade poppler-utilsUpgrade evince-develUpgrade evince-libsUpgrade okular-libsUpgrade poppler-cpp-develUpgrade evince-browser-pluginUpgrade evince-nautilusUpgrade poppler-cppUpgrade popplerUpgrade poppler-glibUpgrade evince-dvi | Jul 21, 2020 | Nov 1, 2018 |
| Redhat_linux | — | Upgrade poppler-qt-develUpgrade poppler-cpp-debuginfoUpgrade poppler-glib-debuginfoUpgrade okular-partUpgrade poppler-debuginfoUpgrade poppler-utils-debuginfoUpgrade poppler-glib-develUpgrade evince-debuginfoUpgrade poppler-qt5-develNo solution existsUpgrade evince-nautilusUpgrade poppler-qtUpgrade evince-dviUpgrade poppler-develUpgrade poppler-qt5Upgrade poppler-debugsourceUpgrade okular-debuginfoUpgrade poppler-glibUpgrade okularUpgrade okular-develUpgrade poppler-cpp-develUpgrade evince-develUpgrade poppler-qt5-debuginfoUpgrade evince-libsUpgrade popplerUpgrade evinceUpgrade poppler-cppUpgrade poppler-utilsUpgrade okular-libsUpgrade evince-browser-pluginUpgrade poppler-demos | Aug 7, 2019 | Nov 2, 2018 |
| Suse | — | Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler73-32bitUpgrade libpoppler-cpp0Upgrade libpoppler-glib8Upgrade libpoppler-develUpgrade libpoppler-glib-develUpgrade poppler-toolsUpgrade libpoppler73 | Dec 2, 2021 | Nov 2, 2018 |
| Ubuntu | — | Upgrade libpoppler73Upgrade libpoppler79Upgrade libpoppler58Upgrade poppler-utilsUpgrade libpoppler85 | Jun 27, 2019 | Nov 2, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub