An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-develUpgrade poppler-cppUpgrade poppler-qtUpgrade poppler-glib-develUpgrade poppler-cpp-develUpgrade popplerUpgrade poppler-utilsUpgrade poppler-qt-develUpgrade poppler-demosUpgrade poppler-glibUpgrade poppler-debuginfo | Apr 27, 2020 | Nov 2, 2018 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Nov 2, 2018 |
| Centos_linux | — | Upgrade okular-partUpgrade poppler-glib-develUpgrade evince-develUpgrade poppler-qt-develUpgrade poppler-develUpgrade popplerUpgrade evince-debuginfoUpgrade poppler-qtUpgrade poppler-glib-debuginfoUpgrade poppler-utilsUpgrade poppler-cpp-develUpgrade poppler-cppUpgrade poppler-utils-debuginfoUpgrade evinceUpgrade okularUpgrade okular-develUpgrade poppler-qt5-debuginfoUpgrade evince-libsUpgrade evince-browser-pluginUpgrade okular-libsUpgrade poppler-demosUpgrade poppler-debuginfoUpgrade poppler-glibUpgrade okular-debuginfoUpgrade poppler-debugsourceUpgrade evince-nautilusUpgrade poppler-cpp-debuginfoUpgrade evince-dvi | Aug 28, 2019 | Nov 2, 2018 |
| Debian | — | Upgrade poppler | Sep 27, 2022 | Nov 2, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-utilsUpgrade popplerUpgrade poppler-glibUpgrade poppler-qt | Sep 16, 2021 | Nov 2, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-glibUpgrade popplerUpgrade poppler-qtUpgrade poppler-utils | Nov 19, 2019 | Nov 2, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler | Nov 19, 2019 | Nov 2, 2018 |
| Huawei Euleros 2_0_sp9 | — | Upgrade poppler-helpUpgrade poppler-cppUpgrade poppler | Feb 8, 2021 | Nov 2, 2018 |
| Oracle_linux | — | Upgrade poppler-qtUpgrade poppler-glib-develUpgrade evinceUpgrade poppler-qt5Upgrade okularUpgrade poppler-qt5-develUpgrade okular-develUpgrade poppler-demosUpgrade poppler-qt-develUpgrade okular-partUpgrade poppler-develUpgrade okular-libsUpgrade evince-nautilusUpgrade evince-dviUpgrade evince-libsUpgrade poppler-utilsUpgrade evince-develUpgrade poppler-glibUpgrade popplerUpgrade poppler-cpp-develUpgrade evince-browser-pluginUpgrade poppler-cpp | Jul 21, 2020 | Nov 1, 2018 |
| Redhat_linux | — | Upgrade evince-libsUpgrade poppler-qt5-debuginfoUpgrade evince-develUpgrade evinceUpgrade popplerUpgrade poppler-cpp-develUpgrade okular-libsUpgrade evince-browser-pluginUpgrade poppler-utilsUpgrade poppler-demosUpgrade poppler-cppUpgrade evince-nautilusUpgrade poppler-glib-debuginfoUpgrade poppler-qtUpgrade evince-debuginfoUpgrade okular-develUpgrade poppler-utils-debuginfoUpgrade poppler-develUpgrade poppler-qt5Upgrade evince-dviUpgrade okular-debuginfoUpgrade poppler-cpp-debuginfoUpgrade poppler-glib-develUpgrade poppler-debugsourceNo solution existsUpgrade poppler-glibUpgrade poppler-qt-develUpgrade poppler-qt5-develUpgrade poppler-debuginfoUpgrade okularUpgrade okular-part | Aug 7, 2019 | Nov 2, 2018 |
| Suse | — | Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler73-32bitUpgrade libpoppler-cpp0Upgrade libpoppler-develUpgrade poppler-toolsUpgrade libpoppler73Upgrade libpoppler-glib8Upgrade libpoppler-glib-devel | Dec 2, 2021 | Nov 2, 2018 |
| Ubuntu | — | Upgrade libpoppler79Upgrade libpoppler73Upgrade libpoppler58Upgrade libpoppler85Upgrade poppler-utils | Jun 27, 2019 | Nov 2, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub