The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented(), leading to uninitialized memory use when processing certain TIFF image files.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pidginUpgrade pidgin-develUpgrade gdk-pixbuf2-xlibUpgrade gdk-pixbuf2-modulesUpgrade libpurpleUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-xlib-develUpgrade gnome-desktop3Upgrade gnome-desktop3-develUpgrade libpurple-develUpgrade gdk-pixbuf2 | May 4, 2022 | Apr 22, 2019 |
| Alpine Linux | — | Upgrade evince | Jul 10, 2019 | Apr 22, 2019 |
| Amazon Linux Ami 2 | — | Upgrade evince-browser-pluginUpgrade evince-libsUpgrade evince-nautilusUpgrade evinceUpgrade evince-dviUpgrade evince-develUpgrade evince-debuginfo | Aug 25, 2020 | Apr 22, 2019 |
| Amazon_linux | — | Upgrade poppler | Jul 18, 2020 | Apr 22, 2019 |
| Centos_linux | — | Upgrade gnome-tweaksUpgrade nautilus-extensions-debuginfoUpgrade poppler-debuginfoUpgrade gjs-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-updates-dialogUpgrade plymouth-devel-debuginfoUpgrade plymouth-plugin-space-flaresUpgrade pangoUpgrade file-roller-debuginfoUpgrade appstream-dataUpgrade gtk3-devel-debuginfoUpgrade plymouth-scriptsUpgrade file-rollerUpgrade webkit2gtk3-devel-debuginfoUpgrade plymouth-plugin-fade-throbber-debuginfoUpgrade plymouth-theme-spinnerUpgrade gvfs-gphoto2-debuginfoUpgrade accountsservice-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-extension-commonUpgrade gdk-pixbuf2-modulesUpgrade gvfs-client-debuginfoUpgrade gvfs-afcUpgrade evince-libsUpgrade gvfs-clientUpgrade gjs-debugsourceUpgrade gnome-remote-desktopUpgrade pango-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gdk-pixbuf2-develUpgrade webkit2gtk3-plugin-process-gtk2-debuginfoUpgrade gnome-software-editor-debuginfoUpgrade mutterUpgrade gnome-software-debugsourceUpgrade gnome-shell-extension-no-hot-cornerUpgrade gtk3-develUpgrade gvfs-goa-debuginfoUpgrade gnome-shell-extension-window-listUpgrade pidgin-debuginfoUpgrade poppler-utilsUpgrade mozjs60-debugsourceUpgrade gvfs-fuse-debuginfoUpgrade plymouth-theme-spinfinityUpgrade gvfs-mtpUpgrade gvfs-debugsourceUpgrade plymouthUpgrade gnome-software-editorUpgrade pidginUpgrade gdm-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade pidgin-perl-debuginfoUpgrade mutter-debuginfoUpgrade plymouth-theme-fade-inUpgrade evince-debugsourceUpgrade plymouth-plugin-label-debuginfoUpgrade poppler-develUpgrade gnome-control-centerUpgrade gdk-pixbuf2-modules-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade plymouth-core-libs-debuginfoUpgrade mozjs60Upgrade nautilus-extensionsUpgrade gvfs-debuginfoUpgrade libpurple-tcl-debuginfoUpgrade plymouth-theme-chargeUpgrade SDLUpgrade gnome-desktop3-debugsourceUpgrade gvfs-develUpgrade evince-browser-pluginUpgrade evince-nautilusUpgrade gnome-settings-daemonUpgrade poppler-demosUpgrade gjsUpgrade pango-debugsourceUpgrade plymouth-plugin-scriptUpgrade SDL-debuginfoUpgrade gnome-shell-extension-auto-move-windowsUpgrade gvfs-smbUpgrade gtk3-tests-debuginfoUpgrade accountsserviceUpgrade gvfs-afpUpgrade gvfs-goaUpgrade gnome-software-debuginfoUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-shell-extension-window-grouperUpgrade gtk3Upgrade gnome-remote-desktop-debugsourceUpgrade poppler-glibUpgrade gsettings-desktop-schemas-develUpgrade gnome-shell-debugsourceUpgrade gnome-shell-extension-top-iconsUpgrade plymouth-system-themeUpgrade evince-dviUpgrade gnome-shellUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-softwareUpgrade gnome-shell-extension-panel-favoritesUpgrade gdk-pixbuf2-tests-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade gnome-shell-debuginfoUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-control-center-debuginfoUpgrade gnome-control-center-debugsourceUpgrade gvfs-afp-debuginfoUpgrade plymouth-graphics-libsUpgrade plymouth-plugin-labelUpgrade mutter-debugsourceUpgrade poppler-cpp-develUpgrade plymouth-plugin-two-stepUpgrade gvfs-fuseUpgrade file-roller-debugsourceUpgrade poppler-qtUpgrade gtk-update-icon-cacheUpgrade plymouth-theme-solarUpgrade webkit2gtk3-jscUpgrade nautilusUpgrade webkit2gtk3-jsc-debuginfoUpgrade gtk3-debuginfoUpgrade baobab-debugsourceUpgrade plymouth-plugin-throbgressUpgrade evince-debuginfoUpgrade gnome-desktop3-debuginfoUpgrade pidgin-debugsourceUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gtk3-debugsourceUpgrade webkit2gtk3-plugin-process-gtk2Upgrade webkit2gtk3-debugsourceUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-apps-menuUpgrade webkit2gtk3-develUpgrade plymouth-plugin-throbgress-debuginfoUpgrade gnome-settings-daemon-debuginfoUpgrade webkit2gtk3-debuginfoUpgrade plymouth-plugin-fade-throbberUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-native-window-placementUpgrade gvfs-archiveUpgrade accountsservice-libsUpgrade gtk3-immodule-ximUpgrade chrome-gnome-shellUpgrade baobabUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-user-themeUpgrade evince-nautilus-debuginfoUpgrade nautilus-debuginfoUpgrade gdk-pixbuf2-debuginfoUpgrade accountsservice-debugsourceUpgrade plymouth-theme-scriptUpgrade evince-browser-plugin-debuginfoUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade plymouth-plugin-two-step-debuginfoUpgrade libpurple-debuginfoUpgrade gvfsUpgrade gnome-shell-extension-windowsNavigatorUpgrade baobab-debuginfoUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-places-menuUpgrade libpurple-perl-debuginfoUpgrade finch-debuginfoUpgrade plymouth-plugin-script-debuginfoUpgrade gdmUpgrade gdk-pixbuf2-debugsourceUpgrade SDL-debugsourceUpgrade webkit2gtk3Upgrade wayland-protocols-develUpgrade libpurpleUpgrade plymouth-core-libsUpgrade pango-develUpgrade pango-tests-debuginfoUpgrade gnome-shell-extension-systemMonitorUpgrade plymouth-graphics-libs-debuginfoUpgrade evince-libs-debuginfoUpgrade poppler-glib-develUpgrade plymouth-plugin-space-flares-debuginfoUpgrade plymouth-debugsourceUpgrade gsettings-desktop-schemasUpgrade gvfs-archive-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gnome-desktop3-tests-debuginfoUpgrade mozjs60-debuginfoUpgrade gnome-shell-extension-dash-to-dockUpgrade evince-develUpgrade gvfs-afc-debuginfoUpgrade plymouth-debuginfoUpgrade SDL-develUpgrade mutter-tests-debuginfoUpgrade poppler-cppUpgrade popplerUpgrade gnome-desktop3Upgrade gtk-update-icon-cache-debuginfoUpgrade evinceUpgrade gnome-desktop3-develUpgrade gvfs-smb-debuginfoUpgrade nautilus-debugsourceUpgrade gvfs-gphoto2Upgrade poppler-qt-develUpgrade gjs-tests-debuginfoUpgrade gdm-debugsourceUpgrade gdk-pixbuf2Upgrade gtk3-immodules-debuginfo | Nov 6, 2019 | Apr 22, 2019 |
| Debian | — | Upgrade evinceUpgrade atril | Aug 15, 2019 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade evince-dviUpgrade evinceUpgrade evince-nautilusUpgrade evince-libs | Feb 22, 2021 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade evinceUpgrade evince-dviUpgrade evince-libsUpgrade evince-nautilus | Apr 30, 2021 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade evince-dviUpgrade evince-nautilusUpgrade evince-libsUpgrade evince | Dec 16, 2020 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade evinceUpgrade evince-nautilusUpgrade evince-dviUpgrade evince-libs | Apr 26, 2022 | Apr 22, 2019 |
| Oracle Solaris | — | Upgrade library/liblouis to version 3.5.0-11.4.15.0.1.2.0 on Solaris 11.4Upgrade image/library/librsvg to version 2.40.16-11.4.15.0.1.2.0 on Solaris 11.4Upgrade desktop/pdf-viewer/evince to version 3.25.4-11.4.15.0.1.2.0 on Solaris 11.4Upgrade library/libsoup to version 2.57.1-11.4.15.0.1.2.0 on Solaris 11.4Upgrade desktop/xdg/xdg-utils to version 1.1.3-11.4.15.0.1.2.0 on Solaris 11.4 | Nov 20, 2019 | Apr 22, 2019 |
| Oracle_linux | — | Upgrade gnome-shell-extension-screenshot-window-sizerUpgrade plymouth-plugin-throbgressUpgrade popplerUpgrade gnome-desktop3-develUpgrade plymouth-theme-fade-inUpgrade gvfs-gphoto2Upgrade gnome-shell-extension-dash-to-dockUpgrade gnome-shell-extension-window-grouperUpgrade gnome-shell-extension-windowsNavigatorUpgrade plymouth-core-libsUpgrade evince-dviUpgrade gnome-shell-extension-updates-dialogUpgrade mutter-develUpgrade gnome-shell-extension-drive-menuUpgrade evinceUpgrade libpurple-develUpgrade gdk-pixbuf2-modulesUpgrade plymouth-theme-chargeUpgrade gtk3-immodule-ximUpgrade SDL-develUpgrade chrome-gnome-shellUpgrade gnome-desktop3Upgrade plymouth-theme-solarUpgrade gvfs-archiveUpgrade plymouth-plugin-labelUpgrade pidginUpgrade wayland-protocols-develUpgrade webkit2gtk3Upgrade poppler-qt-develUpgrade gnome-shell-extension-no-hot-cornerUpgrade accountsservice-libsUpgrade gdk-pixbuf2Upgrade gdmUpgrade evince-libsUpgrade gtk-update-icon-cacheUpgrade plymouth-theme-scriptUpgrade gnome-shell-extension-places-menuUpgrade gsettings-desktop-schemasUpgrade webkit2gtk3-jscUpgrade accountsserviceUpgrade gdk-pixbuf2-xlib-develUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-xlibUpgrade gnome-shell-extension-native-window-placementUpgrade plymouth-theme-spinnerUpgrade appstream-dataUpgrade gjs-develUpgrade SDLUpgrade webkit2gtk3-plugin-process-gtk2Upgrade gvfs-afpUpgrade gnome-shell-extension-commonUpgrade gnome-shell-extension-systemMonitorUpgrade plymouth-plugin-fade-throbberUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-launch-new-instanceUpgrade mozjs60-develUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-classic-sessionUpgrade pango-develUpgrade gvfs-clientUpgrade gnome-control-centerUpgrade webkit2gtk3-jsc-develUpgrade gnome-software-editorUpgrade gnome-shell-extension-apps-menuUpgrade gjsUpgrade gsettings-desktop-schemas-develUpgrade plymouth-graphics-libsUpgrade gtk3-develUpgrade mutterUpgrade nautilusUpgrade evince-browser-pluginUpgrade gvfs-afcUpgrade poppler-glibUpgrade gnome-softwareUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-user-themeUpgrade poppler-demosUpgrade gvfs-mtpUpgrade file-rollerUpgrade nautilus-develUpgrade gnome-shell-extension-disable-screenshieldUpgrade plymouthUpgrade gnome-shell-extension-panel-favoritesUpgrade gtk3Upgrade gvfs-goaUpgrade gnome-shellUpgrade evince-nautilusUpgrade gnome-shell-extension-window-listUpgrade poppler-develUpgrade pidgin-develUpgrade gnome-shell-extension-desktop-iconsUpgrade gnome-control-center-filesystemUpgrade mozjs60Upgrade plymouth-theme-spinfinityUpgrade poppler-cpp-develUpgrade poppler-utilsUpgrade gvfs-fuseUpgrade nautilus-extensionsUpgrade poppler-qtUpgrade gvfs-develUpgrade webkit2gtk3-develUpgrade plymouth-system-themeUpgrade gnome-shell-extension-auto-move-windowsUpgrade poppler-glib-develUpgrade evince-develUpgrade gnome-tweaksUpgrade gnome-remote-desktopUpgrade plymouth-plugin-scriptUpgrade pangoUpgrade gvfs-smbUpgrade gnome-shell-extension-top-iconsUpgrade gvfsUpgrade plymouth-scriptsUpgrade plymouth-plugin-space-flaresUpgrade plymouth-plugin-two-stepUpgrade poppler-cppUpgrade accountsservice-develUpgrade libpurpleUpgrade baobab | Oct 5, 2022 | Apr 13, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Apr 22, 2019 |
| Redhat_linux | — | Upgrade gnome-settings-daemon-debugsourceUpgrade pidgin-develUpgrade gvfs-mtpUpgrade gvfs-afcUpgrade gjsUpgrade plymouthUpgrade plymouth-plugin-label-debuginfoUpgrade poppler-utilsUpgrade nautilus-debuginfoUpgrade SDL-debuginfoUpgrade gnome-remote-desktopUpgrade mozjs60Upgrade gdm-debugsourceUpgrade accountsservice-libsUpgrade libpurple-debuginfoUpgrade gtk3-devel-debuginfoUpgrade gdk-pixbuf2-modulesUpgrade plymouth-plugin-two-step-debuginfoUpgrade gnome-shellUpgrade plymouth-theme-spinnerUpgrade evince-nautilusUpgrade gnome-remote-desktop-debugsourceUpgrade gnome-desktop3-debuginfoUpgrade gvfs-debuginfoUpgrade gnome-software-editorUpgrade gtk-update-icon-cacheUpgrade libpurpleUpgrade plymouth-core-libs-debuginfoUpgrade pango-debugsourceUpgrade gtk3-tests-debuginfoUpgrade evince-browser-pluginUpgrade nautilus-extensionsUpgrade mozjs60-debugsourceUpgrade gnome-shell-extension-no-hot-cornerUpgrade poppler-demosUpgrade gvfs-goaUpgrade libpurple-tcl-debuginfoUpgrade pidginUpgrade gnome-shell-debugsourceUpgrade poppler-glibUpgrade gvfs-fuse-debuginfoUpgrade gvfs-debugsourceUpgrade finch-debuginfoUpgrade gtk3-develUpgrade gvfs-clientUpgrade gnome-shell-extension-native-window-placementUpgrade gjs-tests-debuginfoUpgrade nautilus-develUpgrade mozjs60-develUpgrade webkit2gtk3Upgrade gnome-shell-extension-horizontal-workspacesUpgrade webkit2gtk3-debugsourceUpgrade gvfs-afc-debuginfoUpgrade plymouth-graphics-libs-debuginfoUpgrade gdk-pixbuf2-debugsourceUpgrade baobab-debugsourceUpgrade gtk3-immodules-debuginfoUpgrade plymouth-system-themeUpgrade plymouth-scriptsUpgrade gdm-debuginfoUpgrade gvfs-gphoto2Upgrade baobab-debuginfoUpgrade appstream-dataUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-debuginfoUpgrade poppler-debuginfoUpgrade gtk3-debuginfoUpgrade evince-debuginfoUpgrade gnome-shell-extension-places-menuUpgrade gvfsUpgrade gnome-shell-extension-dash-to-dockUpgrade evince-develUpgrade gvfs-smb-debuginfoUpgrade plymouth-theme-solarUpgrade gnome-control-center-filesystemUpgrade webkit2gtk3-debuginfoUpgrade gnome-software-debuginfoUpgrade plymouth-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade mutter-develUpgrade gnome-control-center-debuginfoUpgrade evinceUpgrade gnome-shell-extension-launch-new-instanceUpgrade nautilus-debugsourceUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade libpurple-perl-debuginfoUpgrade gdk-pixbuf2-tests-debuginfoUpgrade webkit2gtk3-plugin-process-gtk2Upgrade chrome-gnome-shellUpgrade gnome-desktop3-debugsourceUpgrade file-rollerUpgrade plymouth-plugin-labelUpgrade gnome-desktop3-develUpgrade gnome-shell-extension-panel-favoritesUpgrade gsettings-desktop-schemasUpgrade pango-develUpgrade poppler-cppUpgrade mutterUpgrade gvfs-afp-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade pangoUpgrade webkit2gtk3-plugin-process-gtk2-debuginfoUpgrade gjs-debugsourceUpgrade plymouth-graphics-libsUpgrade gnome-desktop3-tests-debuginfoUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-systemMonitorUpgrade plymouth-plugin-script-debuginfoUpgrade gvfs-archiveUpgrade SDL-develUpgrade gdk-pixbuf2-develUpgrade gvfs-mtp-debuginfoUpgrade gvfs-goa-debuginfoUpgrade poppler-develUpgrade plymouth-plugin-fade-throbberUpgrade SDL-debugsourceUpgrade gjs-develUpgrade gdk-pixbuf2Upgrade plymouth-plugin-throbgress-debuginfoUpgrade webkit2gtk3-jscUpgrade mutter-debugsourceUpgrade evince-libs-debuginfoUpgrade gvfs-archive-debuginfoUpgrade popplerUpgrade evince-nautilus-debuginfoUpgrade poppler-qtUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade pidgin-debugsourceUpgrade plymouth-theme-scriptUpgrade gnome-softwareUpgrade pango-debuginfoUpgrade gnome-software-debugsourceUpgrade gnome-shell-extension-auto-move-windowsUpgrade accountsservice-libs-debuginfoUpgrade plymouth-plugin-two-stepUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade gnome-shell-extension-apps-menuUpgrade gnome-classic-sessionUpgrade gnome-desktop3Upgrade mutter-debuginfoUpgrade gjs-debuginfoUpgrade poppler-qt-develUpgrade plymouth-debugsourceUpgrade poppler-cpp-develUpgrade plymouth-core-libsUpgrade gdmUpgrade accountsservice-develNo solution existsUpgrade gnome-shell-extension-top-iconsUpgrade gsettings-desktop-schemas-develUpgrade gtk3-debugsourceUpgrade wayland-protocols-develUpgrade gnome-shell-extension-updates-dialogUpgrade plymouth-theme-fade-inUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gtk3Upgrade gtk3-immodule-ximUpgrade gvfs-smbUpgrade accountsserviceUpgrade poppler-glib-develUpgrade libpurple-develUpgrade gnome-settings-daemon-debuginfoUpgrade gdk-pixbuf2-xlib-develUpgrade gnome-remote-desktop-debuginfoUpgrade webkit2gtk3-develUpgrade plymouth-theme-spinfinityUpgrade pango-tests-debuginfoUpgrade gnome-tweaksUpgrade file-roller-debugsourceUpgrade mutter-tests-debuginfoUpgrade accountsservice-debugsourceUpgrade gnome-control-center-debugsourceUpgrade mozjs60-debuginfoUpgrade file-roller-debuginfoUpgrade gvfs-client-debuginfoUpgrade gnome-shell-extension-disable-screenshieldUpgrade plymouth-devel-debuginfoUpgrade gvfs-develUpgrade evince-debugsource | Nov 6, 2019 | Apr 22, 2019 |
| Rocky_linux | — | Upgrade pidgin-debuginfoUpgrade gdk-pixbuf2-xlibUpgrade pango-develUpgrade pidgin-debugsourceUpgrade gdk-pixbuf2-xlib-develUpgrade gnome-desktop3Upgrade pango-debuginfoUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gdk-pixbuf2-modulesUpgrade pangoUpgrade gdk-pixbuf2-debugsourceUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade gnome-desktop3-debugsourceUpgrade gdk-pixbuf2Upgrade gnome-desktop3-debuginfoUpgrade libpurpleUpgrade pango-debugsourceUpgrade libpurple-develUpgrade gdk-pixbuf2-debuginfoUpgrade gnome-desktop3-develUpgrade pidgin-develUpgrade pidginUpgrade libpurple-debuginfo | Mar 12, 2024 | Apr 22, 2019 |
| Suse | — | Upgrade typelib-1_0-EvinceDocument-3_0Upgrade evinceUpgrade evince-develUpgrade evince-docUpgrade evince-plugin-comicsdocumentUpgrade typelib-1_0-EvinceView-3_0Upgrade evince-plugin-xpsdocumentUpgrade evince-plugin-pdfdocumentUpgrade evince-plugin-djvudocumentUpgrade libevdocument3-4Upgrade evince-plugin-tiffdocumentUpgrade evince-langUpgrade libevview3-3Upgrade evince-plugin-psdocumentUpgrade evince-plugin-dvidocumentUpgrade nautilus-evinceUpgrade evince-browser-plugin | Jul 1, 2019 | Apr 22, 2019 |
| Ubuntu | — | Upgrade evinceUpgrade evince-common | May 4, 2019 | Apr 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub