An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service because EmbFile::save2 in FileSpec.cc lacks a stream check before saving an embedded file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-demosUpgrade poppler-develUpgrade poppler-debuginfoUpgrade poppler-utilsUpgrade poppler-cpp-develUpgrade poppler-glib-develUpgrade poppler-qt-develUpgrade poppler-qtUpgrade poppler-cppUpgrade popplerUpgrade poppler-glib | Apr 27, 2020 | Nov 7, 2018 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Nov 7, 2018 |
| Centos_linux | — | Upgrade okular-partUpgrade okular-debuginfoUpgrade poppler-utilsUpgrade poppler-glib-develUpgrade popplerUpgrade poppler-glibUpgrade evinceUpgrade evince-browser-pluginUpgrade poppler-qtUpgrade evince-debuginfoUpgrade evince-nautilusUpgrade evince-develUpgrade poppler-cpp-develUpgrade evince-dviUpgrade poppler-demosUpgrade okular-develUpgrade poppler-develUpgrade poppler-qt-develUpgrade poppler-debuginfoUpgrade okularUpgrade evince-libsUpgrade poppler-cppUpgrade okular-libs | Aug 28, 2019 | Nov 7, 2018 |
| Debian | — | Upgrade poppler | Mar 12, 2019 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-utilsUpgrade popplerUpgrade poppler-glibUpgrade poppler-qt | Sep 16, 2021 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade popplerUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler-utils | Nov 19, 2019 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade popplerUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler-qt | Nov 19, 2019 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade popplerUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler-utils | Feb 26, 2020 | Nov 7, 2018 |
| Oracle_linux | — | Upgrade poppler-utilsUpgrade evince-nautilusUpgrade okular-develUpgrade okularUpgrade poppler-develUpgrade poppler-cpp-develUpgrade evince-libsUpgrade poppler-demosUpgrade poppler-cppUpgrade poppler-qt-develUpgrade poppler-qtUpgrade okular-partUpgrade evinceUpgrade okular-libsUpgrade poppler-glibUpgrade evince-browser-pluginUpgrade evince-develUpgrade poppler-glib-develUpgrade popplerUpgrade evince-dvi | Jul 21, 2020 | Nov 6, 2018 |
| Redhat_linux | — | Upgrade popplerUpgrade okularUpgrade evince-debuginfoUpgrade evince-libsUpgrade poppler-debuginfoUpgrade poppler-qt-develUpgrade evince-dviUpgrade evinceUpgrade okular-libsUpgrade poppler-cppUpgrade poppler-qtUpgrade okular-partUpgrade poppler-glibUpgrade evince-browser-pluginUpgrade okular-debuginfoUpgrade poppler-cpp-develUpgrade evince-develUpgrade evince-nautilusUpgrade poppler-utilsUpgrade poppler-glib-develUpgrade poppler-develUpgrade okular-develUpgrade poppler-demos | Aug 7, 2019 | Nov 7, 2018 |
| Suse | — | Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib8Upgrade libpoppler73Upgrade libpoppler-glib-develUpgrade libpoppler-develUpgrade libpoppler-cpp0Upgrade libpoppler73-32bitUpgrade poppler-tools | Dec 2, 2021 | Nov 7, 2018 |
| Ubuntu | — | Upgrade libpoppler58Upgrade libpoppler44Upgrade libpoppler79Upgrade libpoppler73Upgrade poppler-utils | Dec 12, 2018 | Nov 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub