An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPageSlice at PSOutputDev.cc.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-cpp-develUpgrade poppler-demosUpgrade poppler-qtUpgrade poppler-cppUpgrade poppler-utilsUpgrade poppler-develUpgrade poppler-qt-develUpgrade poppler-debuginfoUpgrade poppler-glib-develUpgrade popplerUpgrade poppler-glib | Aug 25, 2020 | Apr 5, 2019 |
| Amazon_linux | — | Upgrade poppler | Jul 18, 2020 | Apr 5, 2019 |
| Centos_linux | — | Upgrade poppler-glib-develUpgrade poppler-glibUpgrade poppler-cpp-develUpgrade poppler-qt5-debuginfoUpgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-cppUpgrade evince-nautilusUpgrade evince-browser-pluginUpgrade poppler-cpp-debuginfoUpgrade evince-dviUpgrade evince-develUpgrade poppler-develUpgrade poppler-demosUpgrade poppler-glib-debuginfoUpgrade evince-debuginfoUpgrade poppler-debuginfoUpgrade popplerUpgrade poppler-qt-develUpgrade poppler-debugsourceUpgrade evince-libsUpgrade evinceUpgrade poppler-utils-debuginfo | Sep 12, 2019 | Apr 5, 2019 |
| Debian | — | Upgrade poppler | Oct 18, 2019 | Apr 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-glibUpgrade popplerUpgrade poppler-utilsUpgrade poppler-qt | Sep 16, 2021 | Apr 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler | Apr 30, 2021 | Apr 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade popplerUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler-utils | Mar 24, 2021 | Apr 5, 2019 |
| Oracle_linux | — | Upgrade poppler-demosUpgrade poppler-qt5-develUpgrade poppler-cpp-develUpgrade evince-develUpgrade evince-libsUpgrade poppler-develUpgrade poppler-qt5Upgrade evinceUpgrade poppler-glib-develUpgrade poppler-cppUpgrade poppler-qt-develUpgrade poppler-qtUpgrade evince-dviUpgrade evince-nautilusUpgrade poppler-glibUpgrade popplerUpgrade poppler-utilsUpgrade evince-browser-plugin | Jul 21, 2020 | Apr 3, 2019 |
| Redhat_linux | — | Upgrade poppler-glib-debuginfoUpgrade evince-dviUpgrade evince-debuginfoUpgrade poppler-utils-debuginfoUpgrade poppler-glibUpgrade poppler-qt-develUpgrade popplerUpgrade evinceUpgrade evince-libsUpgrade poppler-debuginfoUpgrade poppler-qt5-debuginfoUpgrade evince-develUpgrade poppler-utilsUpgrade poppler-cpp-debuginfoUpgrade evince-nautilusUpgrade poppler-cpp-develUpgrade poppler-debugsourceUpgrade poppler-demosUpgrade poppler-develUpgrade poppler-cppUpgrade poppler-glib-develUpgrade poppler-qt5-develUpgrade evince-browser-pluginUpgrade poppler-qt5Upgrade poppler-qt | Sep 12, 2019 | Apr 5, 2019 |
| Suse | — | Upgrade libpoppler-glib8Upgrade libpoppler-glib-develUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-develUpgrade libpoppler-cpp0Upgrade poppler-toolsUpgrade libpoppler73Upgrade libpoppler73-32bit | Dec 2, 2021 | Apr 5, 2019 |
| Ubuntu | — | Upgrade libpoppler58Upgrade poppler-utilsUpgrade libpoppler73 | Nov 27, 2020 | Apr 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub