An issue was discovered in Poppler 0.71.0. There is a out-of-bounds read in EmbFile::save2 in FileSpec.cc, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating embedded files before save attempts.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-qt-develUpgrade poppler-demosUpgrade poppler-debuginfoUpgrade poppler-develUpgrade poppler-glibUpgrade popplerUpgrade poppler-cpp-develUpgrade poppler-glib-develUpgrade poppler-qtUpgrade poppler-cppUpgrade poppler-utils | Apr 27, 2020 | Nov 7, 2018 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Nov 7, 2018 |
| Centos_linux | — | Upgrade evince-nautilusUpgrade poppler-qtUpgrade poppler-demosUpgrade poppler-glib-develUpgrade evince-develUpgrade evince-browser-pluginUpgrade poppler-utilsUpgrade poppler-cppUpgrade poppler-cpp-develUpgrade okular-develUpgrade popplerUpgrade okular-debuginfoUpgrade evince-libsUpgrade poppler-develUpgrade evince-debuginfoUpgrade evince-dviUpgrade okular-partUpgrade okularUpgrade poppler-debuginfoUpgrade evinceUpgrade okular-libsUpgrade poppler-qt-develUpgrade poppler-glib | Aug 28, 2019 | Nov 7, 2018 |
| Debian | — | Upgrade poppler | Jul 30, 2024 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade popplerUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler-utils | Sep 16, 2021 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-glibUpgrade poppler-qtUpgrade popplerUpgrade poppler-utils | Nov 19, 2019 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade popplerUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-qt | Nov 19, 2019 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-utilsUpgrade poppler-qtUpgrade popplerUpgrade poppler-glib | Feb 26, 2020 | Nov 7, 2018 |
| Oracle_linux | — | Upgrade okular-partUpgrade poppler-qtUpgrade poppler-cppUpgrade poppler-develUpgrade poppler-demosUpgrade okular-develUpgrade evince-develUpgrade poppler-qt-develUpgrade evince-libsUpgrade evinceUpgrade okularUpgrade poppler-glib-develUpgrade evince-nautilusUpgrade poppler-utilsUpgrade evince-browser-pluginUpgrade poppler-glibUpgrade okular-libsUpgrade popplerUpgrade poppler-cpp-develUpgrade evince-dvi | Jul 21, 2020 | Nov 6, 2018 |
| Redhat_linux | — | Upgrade poppler-cppUpgrade evince-libsUpgrade poppler-demosUpgrade evince-nautilusUpgrade poppler-qt-develUpgrade okular-develUpgrade evince-debuginfoUpgrade okular-libsUpgrade poppler-utilsUpgrade poppler-develUpgrade evince-browser-pluginUpgrade evince-dviUpgrade poppler-cpp-develUpgrade okular-partUpgrade poppler-debuginfoUpgrade poppler-qtUpgrade evinceUpgrade evince-develUpgrade poppler-glib-develUpgrade popplerUpgrade okular-debuginfoUpgrade poppler-glibUpgrade okular | Aug 7, 2019 | Nov 7, 2018 |
| Suse | — | Upgrade libpoppler73Upgrade libpoppler-glib-develUpgrade poppler-toolsUpgrade libpoppler-cpp0Upgrade libpoppler73-32bitUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-develUpgrade libpoppler-glib8 | Dec 2, 2021 | Nov 7, 2018 |
| Ubuntu | — | Upgrade libpoppler58Upgrade poppler-utilsUpgrade libpoppler79Upgrade libpoppler44Upgrade libpoppler73 | Dec 12, 2018 | Nov 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub