An issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating a filename of an embedded file before constructing a save path.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade popplerUpgrade poppler-glibUpgrade poppler-debuginfoUpgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-demosUpgrade poppler-glib-develUpgrade poppler-develUpgrade poppler-cppUpgrade poppler-cpp-develUpgrade poppler-qt-devel | Apr 27, 2020 | Nov 7, 2018 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Nov 7, 2018 |
| Centos_linux | — | Upgrade poppler-demosUpgrade okular-develUpgrade okular-debuginfoUpgrade poppler-debuginfoUpgrade evince-dviUpgrade evince-libsUpgrade poppler-glibUpgrade okularUpgrade okular-libsUpgrade popplerUpgrade okular-partUpgrade evince-nautilusUpgrade poppler-cpp-develUpgrade poppler-qtUpgrade evinceUpgrade evince-browser-pluginUpgrade poppler-utilsUpgrade poppler-develUpgrade poppler-qt-develUpgrade evince-develUpgrade poppler-glib-develUpgrade poppler-cppUpgrade evince-debuginfo | Aug 28, 2019 | Nov 7, 2018 |
| Debian | — | Upgrade poppler | Jul 30, 2024 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler | Sep 16, 2021 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-utilsUpgrade poppler-glibUpgrade popplerUpgrade poppler-qt | Nov 19, 2019 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-glibUpgrade poppler-qtUpgrade poppler-utilsUpgrade poppler | Nov 19, 2019 | Nov 7, 2018 |
| Huawei Euleros 2_0_sp9 | — | Upgrade popplerUpgrade poppler-cppUpgrade poppler-help | Feb 8, 2021 | Nov 7, 2018 |
| Oracle_linux | — | Upgrade poppler-develUpgrade evince-develUpgrade evinceUpgrade poppler-cppUpgrade poppler-demosUpgrade poppler-utilsUpgrade poppler-glib-develUpgrade poppler-cpp-develUpgrade poppler-qtUpgrade poppler-qt-develUpgrade evince-browser-pluginUpgrade evince-libsUpgrade okular-develUpgrade evince-dviUpgrade okular-libsUpgrade okular-partUpgrade poppler-glibUpgrade okularUpgrade evince-nautilusUpgrade poppler | Jul 21, 2020 | Nov 6, 2018 |
| Redhat_linux | — | Upgrade poppler-cppUpgrade poppler-glibUpgrade evinceUpgrade popplerUpgrade evince-libsUpgrade okular-libsUpgrade evince-browser-pluginUpgrade poppler-debuginfoUpgrade evince-dviUpgrade poppler-utilsUpgrade poppler-glib-develUpgrade poppler-develUpgrade okular-develUpgrade evince-develUpgrade okularUpgrade okular-debuginfoUpgrade poppler-qtUpgrade evince-debuginfoUpgrade evince-nautilusUpgrade poppler-qt-develUpgrade poppler-cpp-develUpgrade okular-partUpgrade poppler-demos | Aug 7, 2019 | Nov 7, 2018 |
| Suse | — | Upgrade libpoppler73-32bitUpgrade libpoppler73Upgrade poppler-toolsUpgrade libpoppler-cpp0Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib8Upgrade libpoppler-develUpgrade libpoppler-glib-devel | Dec 2, 2021 | Nov 7, 2018 |
| Ubuntu | — | Upgrade poppler-utilsUpgrade libpoppler79Upgrade libpoppler58Upgrade libpoppler73Upgrade libpoppler44 | Dec 12, 2018 | Nov 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub