In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-glibUpgrade poppler-demosUpgrade poppler-qtUpgrade poppler-glib-develUpgrade poppler-develUpgrade poppler-utilsUpgrade poppler-cpp-develUpgrade poppler-cppUpgrade popplerUpgrade poppler-debuginfoUpgrade poppler-qt-devel | Aug 25, 2020 | May 23, 2019 |
| Amazon_linux | — | Upgrade poppler | Jul 18, 2020 | May 23, 2019 |
| Centos_linux | — | Upgrade poppler-utilsUpgrade poppler-cpp-debuginfoUpgrade poppler-qt5-debuginfoUpgrade evince-nautilusUpgrade evince-browser-pluginUpgrade poppler-demosUpgrade poppler-develUpgrade poppler-debuginfoUpgrade evince-libsUpgrade evince-dviUpgrade poppler-qtUpgrade evince-develUpgrade poppler-utils-debuginfoUpgrade poppler-glib-debuginfoUpgrade poppler-debugsourceUpgrade evinceUpgrade poppler-cpp-develUpgrade poppler-qt-develUpgrade evince-debuginfoUpgrade poppler-glibUpgrade popplerUpgrade poppler-cppUpgrade poppler-glib-devel | Sep 12, 2019 | May 23, 2019 |
| Debian | — | Upgrade poppler | Jun 7, 2019 | May 23, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-glibUpgrade popplerUpgrade poppler-utilsUpgrade poppler-qt | Feb 22, 2021 | May 23, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-glibUpgrade poppler-qtUpgrade popplerUpgrade poppler-utils | Jan 20, 2021 | May 23, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler | Dec 16, 2020 | May 23, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade popplerUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler-utils | Aug 31, 2020 | May 23, 2019 |
| Huawei Euleros 2_0_sp9 | — | Upgrade poppler-cppUpgrade poppler | Nov 3, 2020 | May 23, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/poppler to version 0.79.0-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | May 23, 2019 |
| Oracle_linux | — | Upgrade poppler-qt5-develUpgrade poppler-cppUpgrade poppler-qt5Upgrade poppler-qt-develUpgrade evince-develUpgrade evinceUpgrade poppler-develUpgrade popplerUpgrade poppler-glib-develUpgrade poppler-glibUpgrade evince-browser-pluginUpgrade evince-libsUpgrade evince-dviUpgrade poppler-qtUpgrade poppler-cpp-develUpgrade evince-nautilusUpgrade poppler-utilsUpgrade poppler-demos | Jul 21, 2020 | May 23, 2019 |
| Redhat_linux | — | Upgrade poppler-demosUpgrade poppler-qt-develUpgrade poppler-cpp-debuginfoUpgrade poppler-utils-debuginfoUpgrade evince-libsUpgrade poppler-debuginfoUpgrade evinceUpgrade popplerUpgrade evince-debuginfoUpgrade poppler-qt5-debuginfoUpgrade poppler-glibUpgrade poppler-cppUpgrade evince-nautilusUpgrade poppler-qt5-develUpgrade evince-dviUpgrade poppler-cpp-develUpgrade poppler-qtUpgrade poppler-qt5Upgrade poppler-develUpgrade evince-browser-pluginUpgrade poppler-utilsUpgrade poppler-debugsourceUpgrade poppler-glib-debuginfoUpgrade evince-develUpgrade poppler-glib-develNo solution exists | Sep 12, 2019 | May 23, 2019 |
| Suse | — | Upgrade libpoppler-qt4-develUpgrade libpoppler-glib-develUpgrade libpoppler-develUpgrade libpoppler-qt4-4Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-cpp0Upgrade libpoppler-glib8Upgrade libpoppler60Upgrade libpoppler73Upgrade poppler-toolsUpgrade libpoppler73-32bit | Aug 9, 2024 | May 23, 2019 |
| Ubuntu | — | Upgrade libpoppler58Upgrade libpoppler73Upgrade libpoppler85Upgrade libpoppler79Upgrade poppler-utils | Jun 27, 2019 | May 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub