A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lack of a check for the dict data type, as demonstrated by use of the FileSpec class (in FileSpec.cc) in pdfdetach.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-glibUpgrade poppler-qtUpgrade poppler-glib-develUpgrade poppler-utilsUpgrade poppler-cpp-develUpgrade popplerUpgrade poppler-qt-develUpgrade poppler-demosUpgrade poppler-cppUpgrade poppler-debuginfoUpgrade poppler-devel | Apr 27, 2020 | Jan 1, 2019 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Jan 1, 2019 |
| Centos_linux | — | Upgrade poppler-glib-debuginfoUpgrade okularUpgrade okular-libsUpgrade evinceUpgrade poppler-cppUpgrade evince-libsUpgrade poppler-glibUpgrade popplerUpgrade evince-dviUpgrade evince-debuginfoUpgrade okular-debuginfoUpgrade evince-browser-pluginUpgrade poppler-debugsourceUpgrade evince-develUpgrade okular-partUpgrade poppler-utils-debuginfoUpgrade poppler-qt5-debuginfoUpgrade poppler-qtUpgrade poppler-demosUpgrade evince-nautilusUpgrade okular-develUpgrade poppler-cpp-debuginfoUpgrade poppler-develUpgrade poppler-utilsUpgrade poppler-debuginfoUpgrade poppler-glib-develUpgrade poppler-cpp-develUpgrade poppler-qt-devel | Aug 28, 2019 | Jan 1, 2019 |
| Debian | — | Upgrade poppler | Oct 2, 2019 | Jan 1, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler | Sep 16, 2021 | Jan 1, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-utilsUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler | Nov 19, 2019 | Jan 1, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-glibUpgrade popplerUpgrade poppler-qtUpgrade poppler-utils | Nov 19, 2019 | Jan 1, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade popplerUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler-utils | Feb 26, 2020 | Jan 1, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/poppler to version 0.75.0-11.4.10.0.1.2.0 on Solaris 11.4 | Jun 26, 2019 | Jan 1, 2019 |
| Oracle_linux | — | Upgrade okularUpgrade evinceUpgrade evince-dviUpgrade popplerUpgrade poppler-qt-develUpgrade poppler-cppUpgrade okular-libsUpgrade evince-libsUpgrade poppler-qt5Upgrade okular-develUpgrade poppler-develUpgrade poppler-demosUpgrade poppler-utilsUpgrade evince-develUpgrade poppler-glib-develUpgrade evince-nautilusUpgrade poppler-qtUpgrade evince-browser-pluginUpgrade poppler-glibUpgrade okular-partUpgrade poppler-cpp-develUpgrade poppler-qt5-devel | Jul 21, 2020 | Dec 28, 2018 |
| Redhat_linux | — | Upgrade poppler-qtUpgrade poppler-cpp-develUpgrade poppler-utilsUpgrade okular-libsUpgrade evince-libsUpgrade evince-nautilusUpgrade evince-develUpgrade poppler-qt5-debuginfoUpgrade evince-browser-pluginUpgrade poppler-glib-develUpgrade poppler-cppUpgrade popplerUpgrade okularUpgrade okular-partUpgrade okular-debuginfoUpgrade poppler-utils-debuginfoUpgrade evince-debuginfoUpgrade okular-develUpgrade poppler-glib-debuginfoUpgrade poppler-glibUpgrade poppler-cpp-debuginfoUpgrade poppler-develNo solution existsUpgrade poppler-debuginfoUpgrade evince-dviUpgrade poppler-qt-develUpgrade poppler-demosUpgrade evinceUpgrade poppler-qt5Upgrade poppler-debugsourceUpgrade poppler-qt5-devel | Aug 7, 2019 | Jan 1, 2019 |
| Suse | — | Upgrade poppler-toolsUpgrade libpoppler-glib8Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler73-32bitUpgrade libpoppler-develUpgrade libpoppler-glib-develUpgrade libpoppler73Upgrade libpoppler-cpp0 | Dec 2, 2021 | Jan 1, 2019 |
| Ubuntu | — | Upgrade libpoppler44Upgrade libpoppler58Upgrade libpoppler79Upgrade poppler-utilsUpgrade libpoppler73 | Jan 31, 2019 | Jan 1, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub