An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPageSlice at PSOutputDev.cc.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-cppUpgrade poppler-qtUpgrade poppler-cpp-develUpgrade poppler-utilsUpgrade poppler-demosUpgrade poppler-develUpgrade poppler-qt-develUpgrade poppler-debuginfoUpgrade poppler-glibUpgrade poppler-glib-develUpgrade poppler | Aug 25, 2020 | Apr 5, 2019 |
| Amazon_linux | — | Upgrade poppler | Jul 18, 2020 | Apr 5, 2019 |
| Centos_linux | — | Upgrade evince-nautilusUpgrade poppler-cppUpgrade evince-browser-pluginUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-cpp-develUpgrade poppler-qtUpgrade evince-dviUpgrade poppler-glib-develUpgrade poppler-qt5-debuginfoUpgrade evince-develUpgrade poppler-cpp-debuginfoUpgrade evinceUpgrade poppler-glib-debuginfoUpgrade poppler-qt-develUpgrade poppler-debugsourceUpgrade popplerUpgrade poppler-utils-debuginfoUpgrade evince-debuginfoUpgrade poppler-demosUpgrade poppler-debuginfoUpgrade poppler-develUpgrade evince-libs | Sep 12, 2019 | Apr 5, 2019 |
| Debian | — | Upgrade poppler | Oct 18, 2019 | Apr 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-glibUpgrade poppler-utilsUpgrade popplerUpgrade poppler-qt | Sep 16, 2021 | Apr 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-utilsUpgrade popplerUpgrade poppler-glibUpgrade poppler-qt | Apr 30, 2021 | Apr 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-qtUpgrade popplerUpgrade poppler-utilsUpgrade poppler-glib | Mar 24, 2021 | Apr 5, 2019 |
| Oracle_linux | — | Upgrade poppler-develUpgrade poppler-cppUpgrade poppler-qt5Upgrade poppler-cpp-develUpgrade poppler-qtUpgrade evinceUpgrade poppler-qt-develUpgrade poppler-demosUpgrade poppler-glib-develUpgrade evince-libsUpgrade poppler-qt5-develUpgrade evince-develUpgrade evince-dviUpgrade popplerUpgrade poppler-utilsUpgrade evince-browser-pluginUpgrade evince-nautilusUpgrade poppler-glib | Jul 21, 2020 | Apr 3, 2019 |
| Redhat_linux | — | Upgrade evince-debuginfoUpgrade poppler-glib-debuginfoUpgrade poppler-utils-debuginfoUpgrade poppler-qt-develUpgrade poppler-glibUpgrade evince-dviUpgrade evinceUpgrade evince-libsUpgrade popplerUpgrade poppler-cpp-debuginfoUpgrade evince-develUpgrade poppler-qt5Upgrade poppler-cppUpgrade poppler-demosUpgrade evince-browser-pluginUpgrade poppler-utilsUpgrade poppler-develUpgrade poppler-cpp-develUpgrade poppler-qtUpgrade evince-nautilusUpgrade poppler-qt5-develUpgrade poppler-glib-develUpgrade poppler-qt5-debuginfoUpgrade poppler-debugsourceUpgrade poppler-debuginfo | Sep 12, 2019 | Apr 5, 2019 |
| Suse | — | Upgrade libpoppler73Upgrade libpoppler-cpp0Upgrade poppler-toolsUpgrade libpoppler73-32bitUpgrade libpoppler-glib8Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-develUpgrade libpoppler-glib-devel | Dec 2, 2021 | Apr 5, 2019 |
| Ubuntu | — | Upgrade libpoppler58Upgrade poppler-utilsUpgrade libpoppler73 | Nov 27, 2020 | Apr 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub