The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented(), leading to uninitialized memory use when processing certain TIFF image files.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pidginUpgrade pidgin-develUpgrade libpurpleUpgrade gdk-pixbuf2-xlibUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-xlib-develUpgrade gnome-desktop3-develUpgrade gdk-pixbuf2-develUpgrade gnome-desktop3Upgrade gdk-pixbuf2Upgrade libpurple-devel | May 4, 2022 | Apr 22, 2019 |
| Alpine Linux | — | Upgrade evince | Jul 10, 2019 | Apr 22, 2019 |
| Amazon Linux Ami 2 | — | Upgrade evince-dviUpgrade evinceUpgrade evince-develUpgrade evince-debuginfoUpgrade evince-browser-pluginUpgrade evince-libsUpgrade evince-nautilus | Aug 25, 2020 | Apr 22, 2019 |
| Amazon_linux | — | Upgrade poppler | Jul 18, 2020 | Apr 22, 2019 |
| Centos_linux | — | Upgrade gnome-shell-debuginfoUpgrade gnome-control-center-debugsourceUpgrade mozjs60-debuginfoUpgrade libpurple-perl-debuginfoUpgrade poppler-glibUpgrade evince-nautilus-debuginfoUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gtk3-immodule-ximUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade evince-libs-debuginfoUpgrade plymouth-debugsourceUpgrade accountsservice-libs-debuginfoUpgrade mutter-tests-debuginfoUpgrade plymouth-plugin-two-step-debuginfoUpgrade gvfs-archive-debuginfoUpgrade gtk3Upgrade gsettings-desktop-schemas-develUpgrade gjs-tests-debuginfoUpgrade gvfsUpgrade gvfs-mtp-debuginfoUpgrade gnome-shell-extension-dash-to-dockUpgrade plymouth-graphics-libs-debuginfoUpgrade plymouth-core-libsUpgrade gnome-desktop3-tests-debuginfoUpgrade baobabUpgrade gdk-pixbuf2-debugsourceUpgrade webkit2gtk3Upgrade gvfs-archiveUpgrade evince-dviUpgrade pango-develUpgrade libpurple-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gnome-shell-extension-places-menuUpgrade plymouth-theme-scriptUpgrade gnome-shell-extension-systemMonitorUpgrade pango-tests-debuginfoUpgrade gnome-shell-extension-top-iconsUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-shell-extension-user-themeUpgrade plymouth-plugin-labelUpgrade poppler-qtUpgrade gnome-control-center-filesystemUpgrade mutter-debugsourceUpgrade wayland-protocols-develUpgrade SDL-debugsourceUpgrade gdmUpgrade gnome-shell-extension-apps-menuUpgrade gtk3-debuginfoUpgrade chrome-gnome-shellUpgrade gnome-shell-extension-windowsNavigatorUpgrade baobab-debugsourceUpgrade baobab-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade finch-debuginfoUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-desktop3-debuginfoUpgrade gnome-classic-sessionUpgrade gnome-settings-daemon-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade plymouth-plugin-fade-throbberUpgrade pidgin-debugsourceUpgrade gtk-update-icon-cacheUpgrade file-roller-debugsourceUpgrade poppler-cpp-develUpgrade gtk3-debugsourceUpgrade gvfs-fuseUpgrade gdm-debugsourceUpgrade plymouth-plugin-script-debuginfoUpgrade gsettings-desktop-schemasUpgrade SDL-develUpgrade nautilus-debuginfoUpgrade libpurpleUpgrade gnome-shell-extension-launch-new-instanceUpgrade plymouth-plugin-throbgress-debuginfoUpgrade gnome-softwareUpgrade plymouth-plugin-throbgressUpgrade webkit2gtk3-develUpgrade gvfs-afp-debuginfoUpgrade gnome-shell-extension-native-window-placementUpgrade evince-develUpgrade gnome-shellUpgrade plymouth-graphics-libsUpgrade gdk-pixbuf2-debuginfoUpgrade plymouth-theme-solarUpgrade poppler-cppUpgrade gnome-shell-debugsourceUpgrade gnome-remote-desktop-debugsourceUpgrade webkit2gtk3-jscUpgrade gvfs-afc-debuginfoUpgrade plymouth-system-themeUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-control-center-debuginfoUpgrade plymouth-plugin-two-stepUpgrade gdk-pixbuf2-tests-debuginfoUpgrade gnome-shell-extension-disable-screenshieldUpgrade evince-debuginfoUpgrade plymouth-plugin-space-flares-debuginfoUpgrade nautilusUpgrade webkit2gtk3-plugin-process-gtk2Upgrade accountsservice-libsUpgrade gnome-shell-extension-panel-favoritesUpgrade gvfs-smb-debuginfoUpgrade nautilus-debugsourceUpgrade evinceUpgrade gnome-desktop3-develUpgrade accountsservice-debugsourceUpgrade gnome-desktop3Upgrade webkit2gtk3-jsc-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade gvfs-gphoto2Upgrade plymouth-debuginfoUpgrade poppler-qt-develUpgrade popplerUpgrade poppler-glib-develUpgrade gtk3-immodule-xim-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade gdk-pixbuf2Upgrade file-rollerUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-remote-desktop-debuginfoUpgrade plymouth-plugin-label-debuginfoUpgrade gvfs-mtpUpgrade plymouth-theme-fade-inUpgrade gtk3-develUpgrade evince-nautilusUpgrade gvfs-smbUpgrade libpurple-tcl-debuginfoUpgrade pango-debugsourceUpgrade poppler-develUpgrade gvfs-develUpgrade gnome-settings-daemonUpgrade mutter-debuginfoUpgrade pidgin-perl-debuginfoUpgrade gnome-desktop3-debugsourceUpgrade evince-debugsourceUpgrade gdm-debuginfoUpgrade plymouth-plugin-fade-throbber-debuginfoUpgrade gvfs-afcUpgrade plymouth-devel-debuginfoUpgrade pangoUpgrade plymouth-plugin-space-flaresUpgrade pidginUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-software-debuginfoUpgrade plymouth-theme-spinfinityUpgrade mozjs60-debugsourceUpgrade gnome-tweaksUpgrade gnome-software-debugsourceUpgrade gnome-shell-extension-drive-menuUpgrade accountsservice-debuginfoUpgrade plymouthUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gnome-shell-extension-auto-move-windowsUpgrade mozjs60Upgrade poppler-demosUpgrade SDLUpgrade nautilus-extensionsUpgrade plymouth-theme-chargeUpgrade webkit2gtk3-devel-debuginfoUpgrade gdk-pixbuf2-develUpgrade gnome-software-editor-debuginfoUpgrade gnome-shell-extension-window-listUpgrade appstream-dataUpgrade gvfs-clientUpgrade gvfs-gphoto2-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gnome-shell-extension-commonUpgrade gdk-pixbuf2-modulesUpgrade plymouth-theme-spinnerUpgrade evince-libsUpgrade poppler-utilsUpgrade gvfs-debuginfoUpgrade pidgin-debuginfoUpgrade gjs-debugsourceUpgrade gvfs-debugsourceUpgrade gnome-remote-desktopUpgrade plymouth-scriptsUpgrade gnome-shell-extension-window-grouperUpgrade webkit2gtk3-plugin-process-gtk2-debuginfoUpgrade gvfs-client-debuginfoUpgrade file-roller-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade gnome-shell-extension-updates-dialogUpgrade mutterUpgrade webkit2gtk3-jsc-develUpgrade gnome-software-editorUpgrade pango-debuginfoUpgrade accountsserviceUpgrade gnome-shell-extension-desktop-iconsUpgrade gtk3-tests-debuginfoUpgrade gvfs-afpUpgrade plymouth-core-libs-debuginfoUpgrade gnome-control-centerUpgrade gjsUpgrade gvfs-goa-debuginfoUpgrade gnome-shell-extension-no-hot-cornerUpgrade evince-browser-pluginUpgrade plymouth-plugin-scriptUpgrade gjs-debuginfoUpgrade poppler-debuginfoUpgrade SDL-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade gvfs-goa | Nov 6, 2019 | Apr 22, 2019 |
| Debian | — | Upgrade atrilUpgrade evince | Aug 15, 2019 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade evince-nautilusUpgrade evince-libsUpgrade evinceUpgrade evince-dvi | Feb 22, 2021 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade evince-libsUpgrade evince-nautilusUpgrade evinceUpgrade evince-dvi | Apr 30, 2021 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade evinceUpgrade evince-libsUpgrade evince-dviUpgrade evince-nautilus | Dec 16, 2020 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade evince-libsUpgrade evince-dviUpgrade evince-nautilusUpgrade evince | Apr 26, 2022 | Apr 22, 2019 |
| Oracle Solaris | — | Upgrade desktop/xdg/xdg-utils to version 1.1.3-11.4.15.0.1.2.0 on Solaris 11.4Upgrade desktop/pdf-viewer/evince to version 3.25.4-11.4.15.0.1.2.0 on Solaris 11.4Upgrade image/library/librsvg to version 2.40.16-11.4.15.0.1.2.0 on Solaris 11.4Upgrade library/liblouis to version 3.5.0-11.4.15.0.1.2.0 on Solaris 11.4Upgrade library/libsoup to version 2.57.1-11.4.15.0.1.2.0 on Solaris 11.4 | Nov 20, 2019 | Apr 22, 2019 |
| Oracle_linux | — | Upgrade gvfs-fuseUpgrade poppler-utilsUpgrade nautilus-extensionsUpgrade gnome-tweaksUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-control-center-filesystemUpgrade plymouth-theme-spinfinityUpgrade poppler-cpp-develUpgrade baobabUpgrade pangoUpgrade webkit2gtk3-develUpgrade poppler-qtUpgrade libpurpleUpgrade accountsservice-develUpgrade gtk3Upgrade gvfs-develUpgrade gvfs-mtpUpgrade gvfs-goaUpgrade gnome-shell-extension-panel-favoritesUpgrade poppler-demosUpgrade plymouthUpgrade gnome-shellUpgrade evince-nautilusUpgrade plymouth-scriptsUpgrade plymouth-system-themeUpgrade evince-develUpgrade gnome-shell-extension-disable-screenshieldUpgrade plymouth-plugin-scriptUpgrade file-rollerUpgrade gnome-remote-desktopUpgrade plymouth-plugin-two-stepUpgrade mutterUpgrade gnome-shell-extension-top-iconsUpgrade nautilus-develUpgrade nautilusUpgrade poppler-glib-develUpgrade plymouth-plugin-space-flaresUpgrade gvfs-smbUpgrade pidgin-develUpgrade gvfs-afcUpgrade poppler-cppUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-desktop-iconsUpgrade gvfsUpgrade gnome-shell-extension-window-listUpgrade poppler-glibUpgrade gtk3-develUpgrade mozjs60Upgrade plymouth-graphics-libsUpgrade poppler-develUpgrade gnome-softwareUpgrade evince-browser-pluginUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-control-centerUpgrade gnome-shell-extension-window-grouperUpgrade gvfs-gphoto2Upgrade plymouth-theme-solarUpgrade plymouth-theme-scriptUpgrade gjs-develUpgrade mozjs60-develUpgrade gnome-shell-extension-native-window-placementUpgrade gdk-pixbuf2-develUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-drive-menuUpgrade plymouth-plugin-fade-throbberUpgrade gnome-shell-extension-updates-dialogUpgrade plymouth-theme-chargeUpgrade gnome-classic-sessionUpgrade gdk-pixbuf2-xlibUpgrade gsettings-desktop-schemasUpgrade plymouth-plugin-throbgressUpgrade plymouth-theme-spinnerUpgrade evince-dviUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-windowsNavigatorUpgrade popplerUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade webkit2gtk3-jscUpgrade gdmUpgrade webkit2gtk3-jsc-develUpgrade pango-develUpgrade gnome-shell-extension-places-menuUpgrade appstream-dataUpgrade webkit2gtk3-plugin-process-gtk2Upgrade evince-libsUpgrade gnome-shell-extension-apps-menuUpgrade plymouth-theme-fade-inUpgrade accountsserviceUpgrade plymouth-core-libsUpgrade gnome-shell-extension-commonUpgrade webkit2gtk3Upgrade gnome-shell-extension-no-hot-cornerUpgrade wayland-protocols-develUpgrade gnome-software-editorUpgrade gdk-pixbuf2Upgrade gvfs-archiveUpgrade pidginUpgrade plymouth-plugin-labelUpgrade chrome-gnome-shellUpgrade gnome-desktop3Upgrade gdk-pixbuf2-modulesUpgrade mutter-develUpgrade gtk3-immodule-ximUpgrade accountsservice-libsUpgrade gvfs-clientUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-desktop3-develUpgrade gvfs-afpUpgrade gtk-update-icon-cacheUpgrade SDL-develUpgrade gdk-pixbuf2-xlib-develUpgrade SDLUpgrade poppler-qt-develUpgrade gjsUpgrade libpurple-develUpgrade evinceUpgrade gnome-shell-extension-dash-to-dockUpgrade gsettings-desktop-schemas-devel | Oct 5, 2022 | Apr 13, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Apr 22, 2019 |
| Redhat_linux | — | Upgrade gdk-pixbuf2-modulesUpgrade nautilus-extensionsUpgrade plymouth-core-libs-debuginfoUpgrade evince-browser-pluginUpgrade libpurple-debuginfoUpgrade gnome-settings-daemonUpgrade plymouthUpgrade pidgin-develUpgrade gvfs-mtpUpgrade nautilusUpgrade gnome-shell-debugsourceUpgrade poppler-utilsUpgrade webkit2gtk3-jsc-debuginfoUpgrade SDLUpgrade gtk-update-icon-cacheUpgrade plymouth-plugin-two-step-debuginfoUpgrade pango-debugsourceUpgrade gtk3-devel-debuginfoUpgrade pidginUpgrade gnome-shell-extension-window-listUpgrade gtk-update-icon-cache-debuginfoUpgrade libpurpleUpgrade plymouth-theme-spinnerUpgrade gvfs-debuginfoUpgrade webkit2gtk3-devel-debuginfoUpgrade plymouth-plugin-space-flares-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade plymouth-plugin-scriptUpgrade evince-dviUpgrade gnome-shell-extension-windowsNavigatorUpgrade gvfs-gphoto2-debuginfoUpgrade gtk3-develUpgrade gnome-shell-extension-commonUpgrade gvfs-client-debuginfoUpgrade gnome-remote-desktopUpgrade file-roller-debuginfoUpgrade accountsservice-libsUpgrade SDL-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gvfs-develUpgrade plymouth-devel-debuginfoUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-software-editorUpgrade gvfs-fuseUpgrade gdk-pixbuf2-debuginfoUpgrade poppler-demosUpgrade webkit2gtk3-jsc-develUpgrade evince-libsUpgrade evince-debugsourceUpgrade plymouth-plugin-throbgressUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-extension-desktop-iconsUpgrade plymouth-plugin-label-debuginfoUpgrade gtk3-tests-debuginfoUpgrade evince-nautilusUpgrade finch-debuginfoUpgrade baobabUpgrade mozjs60Upgrade plymouth-plugin-fade-throbber-debuginfoUpgrade gdk-pixbuf2-xlibUpgrade pidgin-perl-debuginfoUpgrade poppler-glibUpgrade pango-debuginfoUpgrade gnome-shellUpgrade accountsservice-debuginfoUpgrade gvfs-afpUpgrade mozjs60-debuginfoUpgrade gtk3-debuginfoUpgrade gnome-shell-extension-no-hot-cornerUpgrade poppler-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade pidgin-debuginfoUpgrade plymouth-plugin-space-flaresUpgrade gnome-control-centerUpgrade gnome-shell-extension-drive-menuUpgrade gjsUpgrade nautilus-extensions-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade gnome-desktop3-debuginfoUpgrade plymouth-theme-chargeUpgrade gnome-remote-desktop-debugsourceUpgrade gvfs-goaUpgrade mozjs60-debugsourceUpgrade gvfs-afcUpgrade nautilus-debuginfoUpgrade gvfs-debugsourceUpgrade gdm-debugsourceUpgrade libpurple-tcl-debuginfoUpgrade plymouth-plugin-fade-throbberUpgrade gsettings-desktop-schemas-develUpgrade gnome-software-debuginfoUpgrade SDL-debugsourceUpgrade gvfs-smbUpgrade plymouth-theme-solarUpgrade accountsservice-debugsourceUpgrade gvfs-mtp-debuginfoUpgrade popplerUpgrade plymouth-debugsourceUpgrade evinceUpgrade gnome-control-center-debugsourceUpgrade gjs-debuginfoUpgrade gvfs-afp-debuginfoUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade plymouth-theme-scriptUpgrade poppler-qt-develUpgrade accountsservice-develUpgrade gnome-shell-extension-updates-dialogUpgrade gjs-debugsourceUpgrade gvfs-smb-debuginfoUpgrade libpurple-develUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade nautilus-debugsourceUpgrade evince-libs-debuginfoUpgrade plymouth-theme-spinfinityUpgrade gnome-shell-extension-native-window-placementUpgrade evince-develUpgrade gtk3-immodules-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade gdk-pixbuf2-xlib-develUpgrade gdk-pixbuf2-develUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-top-iconsUpgrade gdk-pixbuf2Upgrade gnome-control-center-debuginfoUpgrade gnome-shell-extension-disable-screenshield | Nov 6, 2019 | Apr 22, 2019 |
| Rocky_linux | — | Upgrade gnome-desktop3-debuginfoUpgrade libpurple-develUpgrade gnome-desktop3-develUpgrade pidgin-develUpgrade pidginUpgrade gdk-pixbuf2Upgrade pango-debugsourceUpgrade libpurpleUpgrade libpurple-debuginfoUpgrade gdk-pixbuf2-debuginfoUpgrade gnome-desktop3-debugsourceUpgrade pidgin-debugsourceUpgrade gdk-pixbuf2-debugsourceUpgrade gdk-pixbuf2-develUpgrade pidgin-debuginfoUpgrade gdk-pixbuf2-devel-debuginfoUpgrade pango-develUpgrade pangoUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-xlibUpgrade pango-debuginfoUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gdk-pixbuf2-xlib-develUpgrade gnome-desktop3Upgrade gdk-pixbuf2-xlib-debuginfo | Mar 12, 2024 | Apr 22, 2019 |
| Suse | — | Upgrade evince-browser-pluginUpgrade evince-plugin-psdocumentUpgrade libevview3-3Upgrade evince-plugin-dvidocumentUpgrade nautilus-evinceUpgrade evince-plugin-djvudocumentUpgrade evince-plugin-tiffdocumentUpgrade evince-plugin-comicsdocumentUpgrade typelib-1_0-EvinceView-3_0Upgrade evince-develUpgrade evinceUpgrade evince-langUpgrade evince-plugin-pdfdocumentUpgrade evince-docUpgrade libevdocument3-4Upgrade typelib-1_0-EvinceDocument-3_0Upgrade evince-plugin-xpsdocument | Jul 1, 2019 | Apr 22, 2019 |
| Ubuntu | — | Upgrade atril (Ubuntu Pro)Upgrade evinceUpgrade evince-common | May 4, 2019 | Apr 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub