An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPageSlice at PSOutputDev.cc.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-glib-develUpgrade poppler-glibUpgrade popplerUpgrade poppler-debuginfoUpgrade poppler-utilsUpgrade poppler-cpp-develUpgrade poppler-demosUpgrade poppler-develUpgrade poppler-qt-develUpgrade poppler-cppUpgrade poppler-qt | Aug 25, 2020 | Apr 5, 2019 |
| Amazon_linux | — | Upgrade poppler | Jul 18, 2020 | Apr 5, 2019 |
| Centos_linux | — | Upgrade evinceUpgrade poppler-demosUpgrade poppler-develUpgrade poppler-utils-debuginfoUpgrade poppler-debuginfoUpgrade popplerUpgrade poppler-debugsourceUpgrade evince-libsUpgrade evince-debuginfoUpgrade poppler-glib-debuginfoUpgrade poppler-qt-develUpgrade poppler-glib-develUpgrade evince-dviUpgrade evince-nautilusUpgrade evince-browser-pluginUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler-cpp-debuginfoUpgrade evince-develUpgrade poppler-utilsUpgrade poppler-cppUpgrade poppler-qt5-debuginfoUpgrade poppler-cpp-devel | Sep 12, 2019 | Apr 5, 2019 |
| Debian | — | Upgrade poppler | Oct 18, 2019 | Apr 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-utilsUpgrade popplerUpgrade poppler-qtUpgrade poppler-glib | Sep 16, 2021 | Apr 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-utilsUpgrade poppler-glibUpgrade popplerUpgrade poppler-qt | Apr 30, 2021 | Apr 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-qtUpgrade poppler-utilsUpgrade popplerUpgrade poppler-glib | Mar 24, 2021 | Apr 5, 2019 |
| Oracle_linux | — | Upgrade evinceUpgrade poppler-develUpgrade poppler-qtUpgrade poppler-cppUpgrade poppler-demosUpgrade poppler-qt5-develUpgrade poppler-qt-develUpgrade poppler-glib-develUpgrade evince-libsUpgrade poppler-cpp-develUpgrade evince-develUpgrade poppler-qt5Upgrade popplerUpgrade evince-dviUpgrade poppler-utilsUpgrade poppler-glibUpgrade evince-nautilusUpgrade evince-browser-plugin | Jul 21, 2020 | Apr 3, 2019 |
| Redhat_linux | — | Upgrade poppler-glibUpgrade evinceUpgrade popplerUpgrade poppler-glib-debuginfoUpgrade evince-libsUpgrade poppler-qt-develUpgrade evince-debuginfoUpgrade evince-dviUpgrade poppler-utils-debuginfoUpgrade poppler-glib-develUpgrade poppler-cpp-debuginfoUpgrade poppler-debuginfoUpgrade poppler-qt5-develUpgrade evince-browser-pluginUpgrade evince-develUpgrade poppler-cpp-develUpgrade poppler-debugsourceUpgrade poppler-qt5-debuginfoUpgrade poppler-cppUpgrade poppler-develUpgrade poppler-qtUpgrade evince-nautilusUpgrade poppler-demosUpgrade poppler-qt5Upgrade poppler-utils | Sep 12, 2019 | Apr 5, 2019 |
| Suse | — | Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-develUpgrade libpoppler-glib8Upgrade libpoppler-glib-develUpgrade poppler-toolsUpgrade libpoppler73Upgrade libpoppler-cpp0Upgrade libpoppler73-32bit | Dec 2, 2021 | Apr 5, 2019 |
| Ubuntu | — | Upgrade libpoppler73Upgrade poppler-utilsUpgrade libpoppler58 | Nov 27, 2020 | Apr 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub