The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to allocate a large memory chunk on the heap, with a size controlled by an attacker, as demonstrated by pdftocairo.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade poppler | Nov 8, 2019 | Jul 22, 2019 |
| Amazon Linux Ami 2 | — | Upgrade poppler-glibUpgrade poppler-cppUpgrade poppler-demosUpgrade poppler-cpp-develUpgrade popplerUpgrade poppler-utilsUpgrade poppler-debuginfoUpgrade poppler-qtUpgrade poppler-qt-develUpgrade poppler-develUpgrade poppler-glib-devel | Aug 25, 2020 | Jul 22, 2019 |
| Amazon_linux | — | Upgrade poppler | Jul 18, 2020 | Jul 22, 2019 |
| Centos_linux | — | Upgrade poppler-cpp-develUpgrade poppler-develUpgrade poppler-qt5-debuginfoUpgrade poppler-demosUpgrade poppler-qtUpgrade evince-nautilusUpgrade poppler-utilsUpgrade poppler-debuginfoUpgrade poppler-debugsourceUpgrade poppler-cpp-debuginfoUpgrade evince-browser-pluginUpgrade evince-libsUpgrade evinceUpgrade evince-debuginfoUpgrade poppler-glib-debuginfoUpgrade evince-develUpgrade evince-dviUpgrade poppler-glib-develUpgrade poppler-cppUpgrade popplerUpgrade poppler-glibUpgrade poppler-qt-develUpgrade poppler-utils-debuginfo | Sep 12, 2019 | Jul 22, 2019 |
| Debian | — | Upgrade poppler | Oct 18, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler | Dec 4, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade popplerUpgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-glib | Sep 25, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-dataUpgrade popplerUpgrade poppler-qt | Sep 24, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade popplerUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler-utils | Aug 28, 2019 | Jul 22, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/poppler to version 0.79.0-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Jul 22, 2019 |
| Oracle_linux | — | Upgrade poppler-qt-develUpgrade evinceUpgrade evince-libsUpgrade poppler-demosUpgrade poppler-qt5Upgrade poppler-qt5-develUpgrade popplerUpgrade poppler-glibUpgrade evince-browser-pluginUpgrade evince-dviUpgrade evince-nautilusUpgrade poppler-utilsUpgrade poppler-cppUpgrade evince-develUpgrade poppler-glib-develUpgrade poppler-cpp-develUpgrade poppler-develUpgrade poppler-qt | Jul 21, 2020 | Jul 23, 2019 |
| Redhat_linux | — | Upgrade evince-dviUpgrade evince-libsUpgrade poppler-qt5-develUpgrade evince-debuginfoUpgrade poppler-qt5Upgrade poppler-glibUpgrade poppler-debugsourceUpgrade poppler-demosNo solution existsUpgrade evinceUpgrade poppler-develUpgrade poppler-utils-debuginfoUpgrade poppler-qt-develUpgrade poppler-debuginfoUpgrade poppler-glib-debuginfoUpgrade popplerUpgrade evince-browser-pluginUpgrade poppler-cppUpgrade evince-nautilusUpgrade poppler-qtUpgrade poppler-cpp-debuginfoUpgrade poppler-qt5-debuginfoUpgrade poppler-cpp-develUpgrade evince-develUpgrade poppler-glib-develUpgrade poppler-utils | Sep 12, 2019 | Jul 22, 2019 |
| Suse | — | Upgrade poppler-toolsUpgrade libpoppler-glib8Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-develUpgrade libpoppler73-32bitUpgrade libpoppler-cpp0Upgrade libpoppler73Upgrade libpoppler-glib-devel | Dec 2, 2021 | Jul 22, 2019 |
| Ubuntu | — | Upgrade libpoppler58Upgrade poppler-utilsUpgrade libpoppler73 | Nov 27, 2020 | Jul 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub