A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lack of a check for the dict data type, as demonstrated by use of the FileSpec class (in FileSpec.cc) in pdfdetach.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-develUpgrade poppler-demosUpgrade poppler-debuginfoUpgrade poppler-qt-develUpgrade poppler-cppUpgrade poppler-cpp-develUpgrade popplerUpgrade poppler-glib-develUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler-utils | Apr 27, 2020 | Jan 1, 2019 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Jan 1, 2019 |
| Centos_linux | — | Upgrade okularUpgrade evinceUpgrade poppler-glib-debuginfoUpgrade poppler-glibUpgrade okular-libsUpgrade evince-dviUpgrade popplerUpgrade evince-libsUpgrade poppler-cppUpgrade poppler-qt-develUpgrade poppler-utils-debuginfoUpgrade okular-partUpgrade poppler-qt5-debuginfoUpgrade poppler-demosUpgrade okular-develUpgrade evince-develUpgrade poppler-glib-develUpgrade poppler-qtUpgrade poppler-develUpgrade poppler-utilsUpgrade poppler-cpp-debuginfoUpgrade okular-debuginfoUpgrade poppler-cpp-develUpgrade evince-browser-pluginUpgrade evince-debuginfoUpgrade evince-nautilusUpgrade poppler-debugsourceUpgrade poppler-debuginfo | Aug 28, 2019 | Jan 1, 2019 |
| Debian | — | Upgrade poppler | Oct 2, 2019 | Jan 1, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-glibUpgrade poppler-qtUpgrade poppler-utilsUpgrade poppler | Sep 16, 2021 | Jan 1, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-utilsUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler | Nov 19, 2019 | Jan 1, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-qtUpgrade popplerUpgrade poppler-utilsUpgrade poppler-glib | Nov 19, 2019 | Jan 1, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-glibUpgrade popplerUpgrade poppler-qtUpgrade poppler-utils | Feb 26, 2020 | Jan 1, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/poppler to version 0.75.0-11.4.10.0.1.2.0 on Solaris 11.4 | Jun 26, 2019 | Jan 1, 2019 |
| Oracle_linux | — | Upgrade popplerUpgrade poppler-cppUpgrade evince-libsUpgrade okularUpgrade poppler-qt-develUpgrade evinceUpgrade evince-dviUpgrade okular-libsUpgrade okular-partUpgrade poppler-qt5-develUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-qt5Upgrade evince-browser-pluginUpgrade poppler-demosUpgrade poppler-qtUpgrade okular-develUpgrade poppler-cpp-develUpgrade poppler-glib-develUpgrade evince-develUpgrade evince-nautilusUpgrade poppler-devel | Jul 21, 2020 | Dec 28, 2018 |
| Redhat_linux | — | Upgrade poppler-qt5-develUpgrade evince-dviUpgrade poppler-develUpgrade okularUpgrade poppler-debuginfoUpgrade okular-debuginfoUpgrade poppler-qt5Upgrade poppler-glib-debuginfoUpgrade evince-debuginfoUpgrade okular-develUpgrade poppler-glibUpgrade okular-partUpgrade poppler-utils-debuginfoNo solution existsUpgrade evinceUpgrade poppler-cpp-debuginfoUpgrade poppler-demosUpgrade poppler-debugsourceUpgrade poppler-qt-develUpgrade poppler-qtUpgrade evince-libsUpgrade poppler-cpp-develUpgrade evince-nautilusUpgrade poppler-qt5-debuginfoUpgrade poppler-glib-develUpgrade evince-develUpgrade evince-browser-pluginUpgrade okular-libsUpgrade poppler-utilsUpgrade popplerUpgrade poppler-cpp | Aug 7, 2019 | Jan 1, 2019 |
| Suse | — | Upgrade libpoppler-glib8Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-cpp0Upgrade libpoppler73Upgrade libpoppler-develUpgrade libpoppler-glib-develUpgrade libpoppler73-32bitUpgrade poppler-tools | Dec 2, 2021 | Jan 1, 2019 |
| Ubuntu | — | Upgrade libpoppler73Upgrade libpoppler44Upgrade libpoppler58Upgrade libpoppler79Upgrade poppler-utils | Jan 31, 2019 | Jan 1, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub