An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPageSlice at PSOutputDev.cc.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-glib-develUpgrade poppler-debuginfoUpgrade poppler-glibUpgrade popplerUpgrade poppler-utilsUpgrade poppler-cpp-develUpgrade poppler-qtUpgrade poppler-cppUpgrade poppler-develUpgrade poppler-qt-develUpgrade poppler-demos | Aug 25, 2020 | Apr 5, 2019 |
| Amazon_linux | — | Upgrade poppler | Jul 18, 2020 | Apr 5, 2019 |
| Centos_linux | — | Upgrade poppler-qt5-debuginfoUpgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-cpp-develUpgrade poppler-glib-develUpgrade evince-browser-pluginUpgrade poppler-cppUpgrade evince-dviUpgrade evince-nautilusUpgrade poppler-cpp-debuginfoUpgrade poppler-glibUpgrade evince-develUpgrade poppler-develUpgrade evinceUpgrade poppler-qt-develUpgrade poppler-debuginfoUpgrade poppler-glib-debuginfoUpgrade evince-debuginfoUpgrade popplerUpgrade poppler-demosUpgrade evince-libsUpgrade poppler-utils-debuginfoUpgrade poppler-debugsource | Sep 12, 2019 | Apr 5, 2019 |
| Debian | — | Upgrade poppler | Oct 18, 2019 | Apr 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade popplerUpgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-glib | Sep 16, 2021 | Apr 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-qtUpgrade popplerUpgrade poppler-glibUpgrade poppler-utils | Apr 30, 2021 | Apr 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-glibUpgrade popplerUpgrade poppler-qtUpgrade poppler-utils | Mar 24, 2021 | Apr 5, 2019 |
| Oracle_linux | — | Upgrade evince-browser-pluginUpgrade poppler-glibUpgrade popplerUpgrade poppler-utilsUpgrade evince-nautilusUpgrade evince-dviUpgrade poppler-qt5-develUpgrade poppler-qtUpgrade poppler-demosUpgrade poppler-develUpgrade evince-libsUpgrade poppler-cppUpgrade evinceUpgrade poppler-glib-develUpgrade evince-develUpgrade poppler-qt-develUpgrade poppler-qt5Upgrade poppler-cpp-devel | Jul 21, 2020 | Apr 3, 2019 |
| Redhat_linux | — | Upgrade evince-dviUpgrade evince-debuginfoUpgrade evinceUpgrade popplerUpgrade poppler-qt-develUpgrade poppler-utils-debuginfoUpgrade poppler-glibUpgrade poppler-glib-debuginfoUpgrade evince-libsUpgrade poppler-debuginfoUpgrade poppler-qt5-develUpgrade poppler-demosUpgrade poppler-qt5-debuginfoUpgrade evince-develUpgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-cpp-debuginfoUpgrade evince-nautilusUpgrade poppler-qt5Upgrade poppler-cppUpgrade poppler-cpp-develUpgrade poppler-develUpgrade evince-browser-pluginUpgrade poppler-glib-develUpgrade poppler-debugsource | Sep 12, 2019 | Apr 5, 2019 |
| Suse | — | Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-develUpgrade libpoppler-glib-develUpgrade libpoppler-glib8Upgrade libpoppler-cpp0Upgrade libpoppler73Upgrade libpoppler73-32bitUpgrade poppler-tools | Dec 2, 2021 | Apr 5, 2019 |
| Ubuntu | — | Upgrade poppler-utilsUpgrade libpoppler73Upgrade libpoppler58 | Nov 27, 2020 | Apr 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub