An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service because EmbFile::save2 in FileSpec.cc lacks a stream check before saving an embedded file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-glib-develUpgrade popplerUpgrade poppler-cppUpgrade poppler-qt-develUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler-cpp-develUpgrade poppler-qtUpgrade poppler-debuginfoUpgrade poppler-demosUpgrade poppler-devel | Apr 27, 2020 | Nov 7, 2018 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Nov 7, 2018 |
| Centos_linux | — | Upgrade evince-develUpgrade poppler-glibUpgrade poppler-cpp-develUpgrade okular-partUpgrade poppler-qtUpgrade evinceUpgrade evince-debuginfoUpgrade poppler-utilsUpgrade poppler-glib-develUpgrade evince-nautilusUpgrade evince-browser-pluginUpgrade okular-debuginfoUpgrade evince-dviUpgrade popplerUpgrade okularUpgrade poppler-demosUpgrade evince-libsUpgrade poppler-cppUpgrade okular-libsUpgrade okular-develUpgrade poppler-qt-develUpgrade poppler-develUpgrade poppler-debuginfo | Aug 28, 2019 | Nov 7, 2018 |
| Debian | — | Upgrade poppler | Mar 12, 2019 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade popplerUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler-utils | Sep 16, 2021 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade popplerUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler-utils | Nov 19, 2019 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-utilsUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler | Nov 19, 2019 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-qtUpgrade poppler-utilsUpgrade popplerUpgrade poppler-glib | Feb 26, 2020 | Nov 7, 2018 |
| Oracle_linux | — | Upgrade evince-dviUpgrade poppler-glibUpgrade okular-libsUpgrade evince-browser-pluginUpgrade popplerUpgrade evinceUpgrade evince-develUpgrade poppler-glib-develUpgrade poppler-cppUpgrade okular-partUpgrade poppler-demosUpgrade poppler-qtUpgrade okular-develUpgrade okularUpgrade evince-libsUpgrade poppler-develUpgrade poppler-utilsUpgrade evince-nautilusUpgrade poppler-cpp-develUpgrade poppler-qt-devel | Jul 21, 2020 | Nov 6, 2018 |
| Redhat_linux | — | Upgrade okular-libsUpgrade evinceUpgrade evince-dviUpgrade popplerUpgrade evince-debuginfoUpgrade evince-libsUpgrade poppler-debuginfoUpgrade poppler-qt-develUpgrade okularUpgrade okular-partUpgrade evince-nautilusUpgrade poppler-cpp-develUpgrade poppler-glibUpgrade poppler-demosUpgrade evince-develUpgrade poppler-utilsUpgrade poppler-develUpgrade poppler-cppUpgrade okular-debuginfoUpgrade poppler-qtUpgrade evince-browser-pluginUpgrade poppler-glib-develUpgrade okular-devel | Aug 7, 2019 | Nov 7, 2018 |
| Suse | — | Upgrade libpoppler-develUpgrade libpoppler-glib-develUpgrade poppler-toolsUpgrade libpoppler73-32bitUpgrade libpoppler-cpp0Upgrade libpoppler73Upgrade libpoppler-glib8Upgrade typelib-1_0-Poppler-0_18 | Dec 2, 2021 | Nov 7, 2018 |
| Ubuntu | — | Upgrade poppler-utilsUpgrade libpoppler73Upgrade libpoppler79Upgrade libpoppler44Upgrade libpoppler58 | Dec 12, 2018 | Nov 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub