An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPageSlice at PSOutputDev.cc.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-demosUpgrade poppler-utilsUpgrade poppler-develUpgrade poppler-cppUpgrade poppler-cpp-develUpgrade poppler-qtUpgrade poppler-qt-develUpgrade popplerUpgrade poppler-glib-develUpgrade poppler-glibUpgrade poppler-debuginfo | Aug 25, 2020 | Apr 5, 2019 |
| Amazon_linux | — | Upgrade poppler | Jul 18, 2020 | Apr 5, 2019 |
| Centos_linux | — | Upgrade poppler-qtUpgrade evince-dviUpgrade evince-nautilusUpgrade poppler-cpp-develUpgrade poppler-cppUpgrade evince-browser-pluginUpgrade poppler-cpp-debuginfoUpgrade evince-develUpgrade poppler-glibUpgrade poppler-qt5-debuginfoUpgrade poppler-utilsUpgrade poppler-glib-develUpgrade poppler-glib-debuginfoUpgrade poppler-utils-debuginfoUpgrade evince-libsUpgrade evince-debuginfoUpgrade evinceUpgrade poppler-debuginfoUpgrade popplerUpgrade poppler-debugsourceUpgrade poppler-qt-develUpgrade poppler-develUpgrade poppler-demos | Sep 12, 2019 | Apr 5, 2019 |
| Debian | — | Upgrade poppler | Oct 18, 2019 | Apr 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-utilsUpgrade popplerUpgrade poppler-qtUpgrade poppler-glib | Sep 16, 2021 | Apr 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-qtUpgrade poppler-utilsUpgrade popplerUpgrade poppler-glib | Apr 30, 2021 | Apr 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler | Mar 24, 2021 | Apr 5, 2019 |
| Oracle_linux | — | Upgrade poppler-cpp-develUpgrade evince-develUpgrade poppler-qt-develUpgrade poppler-cppUpgrade evinceUpgrade poppler-demosUpgrade poppler-develUpgrade poppler-qt5-develUpgrade poppler-glib-develUpgrade poppler-qtUpgrade poppler-qt5Upgrade evince-libsUpgrade poppler-glibUpgrade popplerUpgrade evince-nautilusUpgrade poppler-utilsUpgrade evince-browser-pluginUpgrade evince-dvi | Jul 21, 2020 | Apr 3, 2019 |
| Redhat_linux | — | Upgrade popplerUpgrade evince-debuginfoUpgrade evince-dviUpgrade poppler-glibUpgrade evinceUpgrade poppler-qt-develUpgrade poppler-glib-debuginfoUpgrade poppler-utils-debuginfoUpgrade evince-libsUpgrade poppler-qt5Upgrade poppler-demosUpgrade evince-browser-pluginUpgrade poppler-debuginfoUpgrade evince-nautilusUpgrade poppler-cpp-develUpgrade poppler-develUpgrade poppler-debugsourceUpgrade poppler-qt5-develUpgrade poppler-utilsUpgrade poppler-qt5-debuginfoUpgrade poppler-glib-develUpgrade evince-develUpgrade poppler-cpp-debuginfoUpgrade poppler-cppUpgrade poppler-qt | Sep 12, 2019 | Apr 5, 2019 |
| Suse | — | Upgrade libpoppler-cpp0Upgrade libpoppler73Upgrade poppler-toolsUpgrade libpoppler73-32bitUpgrade libpoppler-glib-develUpgrade libpoppler-develUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib8 | Dec 2, 2021 | Apr 5, 2019 |
| Ubuntu | — | Upgrade libpoppler58Upgrade poppler-utilsUpgrade libpoppler73 | Nov 27, 2020 | Apr 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub