A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lack of a check for the dict data type, as demonstrated by use of the FileSpec class (in FileSpec.cc) in pdfdetach.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-develUpgrade poppler-debuginfoUpgrade poppler-qt-develUpgrade poppler-demosUpgrade poppler-cppUpgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-cpp-develUpgrade poppler-glibUpgrade poppler-glib-develUpgrade poppler | Apr 27, 2020 | Jan 1, 2019 |
| Amazon_linux | — | Upgrade poppler | Aug 28, 2019 | Jan 1, 2019 |
| Centos_linux | — | Upgrade evince-debuginfoUpgrade okular-develUpgrade poppler-glib-develUpgrade poppler-utils-debuginfoUpgrade poppler-debuginfoUpgrade evince-nautilusUpgrade okular-partUpgrade poppler-demosUpgrade poppler-develUpgrade poppler-qt5-debuginfoUpgrade poppler-qtUpgrade okular-debuginfoUpgrade poppler-debugsourceUpgrade evince-browser-pluginUpgrade poppler-cpp-debuginfoUpgrade poppler-utilsUpgrade poppler-cpp-develUpgrade poppler-qt-develUpgrade evince-develUpgrade evinceUpgrade okularUpgrade poppler-cppUpgrade okular-libsUpgrade popplerUpgrade poppler-glibUpgrade evince-dviUpgrade poppler-glib-debuginfoUpgrade evince-libs | Aug 28, 2019 | Jan 1, 2019 |
| Debian | — | Upgrade poppler | Oct 2, 2019 | Jan 1, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-glibUpgrade popplerUpgrade poppler-utilsUpgrade poppler-qt | Sep 16, 2021 | Jan 1, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-utilsUpgrade poppler-glibUpgrade popplerUpgrade poppler-qt | Nov 19, 2019 | Jan 1, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade popplerUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-qt | Nov 19, 2019 | Jan 1, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-utilsUpgrade poppler-qtUpgrade popplerUpgrade poppler-glib | Feb 26, 2020 | Jan 1, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/poppler to version 0.75.0-11.4.10.0.1.2.0 on Solaris 11.4 | Jun 26, 2019 | Jan 1, 2019 |
| Oracle_linux | — | Upgrade poppler-cppUpgrade poppler-qt-develUpgrade okularUpgrade popplerUpgrade evince-libsUpgrade okular-libsUpgrade evince-dviUpgrade evinceUpgrade poppler-utilsUpgrade poppler-demosUpgrade okular-develUpgrade poppler-glib-develUpgrade evince-browser-pluginUpgrade poppler-qtUpgrade okular-partUpgrade evince-develUpgrade poppler-cpp-develUpgrade poppler-glibUpgrade poppler-develUpgrade evince-nautilusUpgrade poppler-qt5Upgrade poppler-qt5-devel | Jul 21, 2020 | Dec 28, 2018 |
| Redhat_linux | — | Upgrade evince-debuginfoUpgrade evince-dviUpgrade poppler-glib-debuginfoUpgrade poppler-utils-debuginfoUpgrade poppler-glibUpgrade poppler-debuginfoUpgrade okular-partUpgrade poppler-debugsourceUpgrade poppler-qt5-develUpgrade poppler-cpp-debuginfoNo solution existsUpgrade poppler-qt5Upgrade okularUpgrade evinceUpgrade poppler-develUpgrade poppler-qt-develUpgrade poppler-demosUpgrade okular-develUpgrade okular-debuginfoUpgrade poppler-utilsUpgrade okular-libsUpgrade evince-libsUpgrade evince-develUpgrade popplerUpgrade poppler-qt5-debuginfoUpgrade poppler-qtUpgrade evince-browser-pluginUpgrade poppler-cppUpgrade poppler-cpp-develUpgrade poppler-glib-develUpgrade evince-nautilus | Aug 7, 2019 | Jan 1, 2019 |
| Suse | — | Upgrade libpoppler73Upgrade libpoppler73-32bitUpgrade libpoppler-glib8Upgrade libpoppler-cpp0Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-develUpgrade libpoppler-glib-develUpgrade poppler-tools | Dec 2, 2021 | Jan 1, 2019 |
| Ubuntu | — | Upgrade libpoppler73Upgrade libpoppler58Upgrade libpoppler79Upgrade poppler-utilsUpgrade libpoppler44 | Jan 31, 2019 | Jan 1, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub