An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service because EmbFile::save2 in FileSpec.cc lacks a stream check before saving an embedded file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade popplerUpgrade poppler-qt-develUpgrade poppler-cppUpgrade poppler-glib-develUpgrade poppler-qtUpgrade poppler-cpp-develUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-develUpgrade poppler-demosUpgrade poppler-debuginfo | Apr 27, 2020 | Nov 7, 2018 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Nov 7, 2018 |
| Centos_linux | — | Upgrade okular-libsUpgrade evince-libsUpgrade poppler-debuginfoUpgrade okularUpgrade okular-develUpgrade poppler-cppUpgrade poppler-develUpgrade poppler-qt-develUpgrade poppler-demosUpgrade evince-nautilusUpgrade okular-debuginfoUpgrade popplerUpgrade poppler-qtUpgrade poppler-glib-develUpgrade evince-debuginfoUpgrade evince-develUpgrade poppler-utilsUpgrade evinceUpgrade evince-browser-pluginUpgrade poppler-glibUpgrade evince-dviUpgrade okular-partUpgrade poppler-cpp-devel | Aug 28, 2019 | Nov 7, 2018 |
| Debian | — | Upgrade poppler | Mar 12, 2019 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-qtUpgrade popplerUpgrade poppler-utilsUpgrade poppler-glib | Sep 16, 2021 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-qtUpgrade popplerUpgrade poppler-glibUpgrade poppler-utils | Nov 19, 2019 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade popplerUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler-utils | Nov 19, 2019 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade popplerUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-qt | Feb 26, 2020 | Nov 7, 2018 |
| Oracle_linux | — | Upgrade evince-nautilusUpgrade poppler-cppUpgrade okularUpgrade poppler-cpp-develUpgrade poppler-demosUpgrade okular-partUpgrade poppler-qt-develUpgrade poppler-utilsUpgrade evince-libsUpgrade okular-develUpgrade poppler-develUpgrade poppler-qtUpgrade evince-dviUpgrade poppler-glibUpgrade evince-browser-pluginUpgrade okular-libsUpgrade evinceUpgrade popplerUpgrade evince-develUpgrade poppler-glib-devel | Jul 21, 2020 | Nov 6, 2018 |
| Redhat_linux | — | Upgrade evince-libsUpgrade okularUpgrade popplerUpgrade evinceUpgrade evince-debuginfoUpgrade poppler-qt-develUpgrade poppler-debuginfoUpgrade evince-dviUpgrade okular-libsUpgrade poppler-cpp-develUpgrade evince-develUpgrade poppler-cppUpgrade okular-develUpgrade poppler-develUpgrade poppler-demosUpgrade poppler-qtUpgrade poppler-utilsUpgrade okular-partUpgrade poppler-glib-develUpgrade evince-nautilusUpgrade poppler-glibUpgrade evince-browser-pluginUpgrade okular-debuginfo | Aug 7, 2019 | Nov 7, 2018 |
| Suse | — | Upgrade libpoppler-develUpgrade libpoppler-glib-develUpgrade libpoppler-cpp0Upgrade poppler-toolsUpgrade libpoppler73-32bitUpgrade libpoppler73Upgrade libpoppler-glib8Upgrade typelib-1_0-Poppler-0_18 | Dec 2, 2021 | Nov 7, 2018 |
| Ubuntu | — | Upgrade libpoppler44Upgrade libpoppler58Upgrade poppler-utilsUpgrade libpoppler79Upgrade libpoppler73 | Dec 12, 2018 | Nov 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub