The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to allocate a large memory chunk on the heap, with a size controlled by an attacker, as demonstrated by pdftocairo.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade poppler | Nov 8, 2019 | Jul 22, 2019 |
| Amazon Linux Ami 2 | — | Upgrade poppler-glib-develUpgrade poppler-qt-develUpgrade poppler-develUpgrade poppler-glibUpgrade popplerUpgrade poppler-utilsUpgrade poppler-demosUpgrade poppler-debuginfoUpgrade poppler-cpp-develUpgrade poppler-qtUpgrade poppler-cpp | Aug 25, 2020 | Jul 22, 2019 |
| Amazon_linux | — | Upgrade poppler | Jul 18, 2020 | Jul 22, 2019 |
| Centos_linux | — | Upgrade evince-dviUpgrade poppler-utils-debuginfoUpgrade evinceUpgrade evince-debuginfoUpgrade poppler-qt-develUpgrade poppler-glib-develUpgrade poppler-glib-debuginfoUpgrade poppler-cppUpgrade evince-develUpgrade popplerUpgrade poppler-glibUpgrade poppler-qt5-debuginfoUpgrade evince-browser-pluginUpgrade poppler-qtUpgrade poppler-cpp-develUpgrade evince-libsUpgrade poppler-debuginfoUpgrade poppler-cpp-debuginfoUpgrade poppler-utilsUpgrade poppler-demosUpgrade evince-nautilusUpgrade poppler-debugsourceUpgrade poppler-devel | Sep 12, 2019 | Jul 22, 2019 |
| Debian | — | Upgrade poppler | Oct 18, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-glibUpgrade poppler-qtUpgrade poppler-utilsUpgrade poppler | Dec 4, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-glibUpgrade poppler-utilsUpgrade popplerUpgrade poppler-qt | Sep 25, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-qtUpgrade popplerUpgrade poppler-data | Sep 24, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-glibUpgrade popplerUpgrade poppler-qtUpgrade poppler-utils | Aug 28, 2019 | Jul 22, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/poppler to version 0.79.0-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Jul 22, 2019 |
| Oracle_linux | — | Upgrade poppler-cpp-develUpgrade poppler-glib-develUpgrade poppler-develUpgrade evince-dviUpgrade poppler-utilsUpgrade poppler-glibUpgrade evince-nautilusUpgrade evince-develUpgrade poppler-cppUpgrade evince-browser-pluginUpgrade poppler-qtUpgrade evinceUpgrade poppler-qt5-develUpgrade poppler-qt5Upgrade poppler-demosUpgrade popplerUpgrade poppler-qt-develUpgrade evince-libs | Jul 21, 2020 | Jul 23, 2019 |
| Redhat_linux | — | Upgrade poppler-qt5-debuginfoUpgrade poppler-cpp-develUpgrade evince-browser-pluginUpgrade poppler-cpp-debuginfoUpgrade evince-develUpgrade evince-nautilusUpgrade poppler-qtUpgrade poppler-glib-debuginfoUpgrade poppler-utilsUpgrade poppler-glib-develUpgrade popplerUpgrade poppler-cppUpgrade poppler-utils-debuginfoUpgrade evince-libsNo solution existsUpgrade evinceUpgrade poppler-glibUpgrade poppler-qt5Upgrade evince-debuginfoUpgrade poppler-qt5-develUpgrade poppler-debugsourceUpgrade evince-dviUpgrade poppler-qt-develUpgrade poppler-develUpgrade poppler-demosUpgrade poppler-debuginfo | Sep 12, 2019 | Jul 22, 2019 |
| Suse | — | Upgrade poppler-toolsUpgrade libpoppler-glib-develUpgrade libpoppler-cpp0Upgrade libpoppler73-32bitUpgrade libpoppler-glib8Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler73Upgrade libpoppler-devel | Dec 2, 2021 | Jul 22, 2019 |
| Ubuntu | — | Upgrade libpoppler73Upgrade poppler-utilsUpgrade libpoppler58 | Nov 27, 2020 | Jul 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub