An issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating a filename of an embedded file before constructing a save path.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade popplerUpgrade poppler-debuginfoUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-cppUpgrade poppler-cpp-develUpgrade poppler-qt-develUpgrade poppler-demosUpgrade poppler-qtUpgrade poppler-develUpgrade poppler-glib-devel | Apr 27, 2020 | Nov 7, 2018 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Nov 7, 2018 |
| Centos_linux | — | Upgrade poppler-glibUpgrade okular-develUpgrade poppler-debuginfoUpgrade evince-libsUpgrade okular-partUpgrade okularUpgrade okular-libsUpgrade evince-nautilusUpgrade okular-debuginfoUpgrade poppler-demosUpgrade evince-dviUpgrade popplerUpgrade poppler-qt-develUpgrade poppler-develUpgrade evince-browser-pluginUpgrade poppler-glib-develUpgrade poppler-qtUpgrade evince-debuginfoUpgrade poppler-utilsUpgrade evince-develUpgrade poppler-cppUpgrade poppler-cpp-develUpgrade evince | Aug 28, 2019 | Nov 7, 2018 |
| Debian | — | Upgrade poppler | Jul 30, 2024 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-qtUpgrade poppler | Sep 16, 2021 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-glibUpgrade poppler-qtUpgrade poppler-utilsUpgrade poppler | Nov 19, 2019 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-glibUpgrade poppler-qtUpgrade popplerUpgrade poppler-utils | Nov 19, 2019 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp9 | — | Upgrade poppler-cppUpgrade popplerUpgrade poppler-help | Feb 8, 2021 | Nov 7, 2018 |
| Oracle_linux | — | Upgrade evince-develUpgrade poppler-cpp-develUpgrade poppler-develUpgrade evince-browser-pluginUpgrade poppler-qt-develUpgrade poppler-utilsUpgrade poppler-cppUpgrade evinceUpgrade poppler-qtUpgrade poppler-demosUpgrade poppler-glib-develUpgrade okular-libsUpgrade okularUpgrade evince-nautilusUpgrade popplerUpgrade evince-dviUpgrade poppler-glibUpgrade evince-libsUpgrade okular-develUpgrade okular-part | Jul 21, 2020 | Nov 6, 2018 |
| Redhat_linux | — | Upgrade okular-libsUpgrade popplerUpgrade evince-browser-pluginUpgrade poppler-debuginfoUpgrade evince-dviUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-cppUpgrade evince-libsUpgrade poppler-glib-develUpgrade evinceUpgrade evince-develUpgrade evince-debuginfoUpgrade okular-develUpgrade okular-debuginfoUpgrade poppler-develUpgrade okular-partUpgrade poppler-cpp-develUpgrade evince-nautilusUpgrade poppler-qt-develUpgrade poppler-qtUpgrade okularUpgrade poppler-demos | Aug 7, 2019 | Nov 7, 2018 |
| Suse | — | Upgrade libpoppler73Upgrade poppler-toolsUpgrade libpoppler73-32bitUpgrade libpoppler-develUpgrade libpoppler-cpp0Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib8Upgrade libpoppler-glib-devel | Dec 2, 2021 | Nov 7, 2018 |
| Ubuntu | — | Upgrade libpoppler73Upgrade libpoppler44Upgrade libpoppler79Upgrade poppler-utilsUpgrade libpoppler58 | Dec 12, 2018 | Nov 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub