An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service because EmbFile::save2 in FileSpec.cc lacks a stream check before saving an embedded file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-demosUpgrade poppler-debuginfoUpgrade poppler-develUpgrade poppler-cppUpgrade poppler-glib-develUpgrade popplerUpgrade poppler-cpp-develUpgrade poppler-utilsUpgrade poppler-qt-develUpgrade poppler-glibUpgrade poppler-qt | Apr 27, 2020 | Nov 7, 2018 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Nov 7, 2018 |
| Centos_linux | — | Upgrade evinceUpgrade popplerUpgrade evince-debuginfoUpgrade evince-nautilusUpgrade poppler-glibUpgrade okular-partUpgrade poppler-cpp-develUpgrade evince-dviUpgrade poppler-utilsUpgrade poppler-glib-develUpgrade okular-debuginfoUpgrade evince-develUpgrade poppler-qtUpgrade evince-browser-pluginUpgrade evince-libsUpgrade poppler-cppUpgrade poppler-qt-develUpgrade okular-libsUpgrade poppler-demosUpgrade okularUpgrade poppler-debuginfoUpgrade poppler-develUpgrade okular-devel | Aug 28, 2019 | Nov 7, 2018 |
| Debian | — | Upgrade poppler | Mar 12, 2019 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade popplerUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler-qt | Sep 16, 2021 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-qtUpgrade popplerUpgrade poppler-glibUpgrade poppler-utils | Nov 19, 2019 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade popplerUpgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-glib | Nov 19, 2019 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler | Feb 26, 2020 | Nov 7, 2018 |
| Oracle_linux | — | Upgrade evince-libsUpgrade okular-partUpgrade okular-develUpgrade poppler-qtUpgrade poppler-develUpgrade poppler-utilsUpgrade okularUpgrade poppler-demosUpgrade evince-nautilusUpgrade poppler-cppUpgrade poppler-cpp-develUpgrade poppler-qt-develUpgrade evince-dviUpgrade evince-browser-pluginUpgrade evince-develUpgrade evinceUpgrade okular-libsUpgrade popplerUpgrade poppler-glibUpgrade poppler-glib-devel | Jul 21, 2020 | Nov 6, 2018 |
| Redhat_linux | — | Upgrade evinceUpgrade okularUpgrade evince-debuginfoUpgrade popplerUpgrade poppler-debuginfoUpgrade okular-libsUpgrade evince-libsUpgrade poppler-qt-develUpgrade evince-dviUpgrade poppler-glib-develUpgrade poppler-qtUpgrade poppler-cpp-develUpgrade evince-browser-pluginUpgrade poppler-utilsUpgrade okular-partUpgrade poppler-develUpgrade okular-develUpgrade evince-develUpgrade poppler-demosUpgrade poppler-glibUpgrade okular-debuginfoUpgrade evince-nautilusUpgrade poppler-cpp | Aug 7, 2019 | Nov 7, 2018 |
| Suse | — | Upgrade poppler-toolsUpgrade libpoppler-develUpgrade libpoppler-cpp0Upgrade libpoppler73-32bitUpgrade libpoppler-glib-develUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib8Upgrade libpoppler73 | Dec 2, 2021 | Nov 7, 2018 |
| Ubuntu | — | Upgrade libpoppler44Upgrade libpoppler58Upgrade libpoppler73Upgrade libpoppler79Upgrade poppler-utils | Dec 12, 2018 | Nov 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub