The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to allocate a large memory chunk on the heap, with a size controlled by an attacker, as demonstrated by pdftocairo.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade poppler | Nov 8, 2019 | Jul 22, 2019 |
| Amazon Linux Ami 2 | — | Upgrade poppler-glib-develUpgrade poppler-qt-develUpgrade poppler-develUpgrade poppler-cppUpgrade popplerUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler-cpp-develUpgrade poppler-demosUpgrade poppler-utilsUpgrade poppler-debuginfo | Aug 25, 2020 | Jul 22, 2019 |
| Amazon_linux | — | Upgrade poppler | Jul 18, 2020 | Jul 22, 2019 |
| Centos_linux | — | Upgrade evince-develUpgrade poppler-utils-debuginfoUpgrade poppler-qt-develUpgrade evince-dviUpgrade popplerUpgrade evinceUpgrade poppler-cppUpgrade poppler-glib-debuginfoUpgrade poppler-glib-develUpgrade evince-debuginfoUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler-cpp-develUpgrade poppler-utilsUpgrade poppler-develUpgrade poppler-debuginfoUpgrade poppler-debugsourceUpgrade evince-libsUpgrade poppler-cpp-debuginfoUpgrade poppler-qt5-debuginfoUpgrade evince-browser-pluginUpgrade evince-nautilusUpgrade poppler-demos | Sep 12, 2019 | Jul 22, 2019 |
| Debian | — | Upgrade poppler | Oct 18, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-glibUpgrade poppler-utilsUpgrade popplerUpgrade poppler-qt | Dec 4, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler | Sep 25, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-utilsUpgrade popplerUpgrade poppler-dataUpgrade poppler-glibUpgrade poppler-qt | Sep 24, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-glibUpgrade popplerUpgrade poppler-utilsUpgrade poppler-qt | Aug 28, 2019 | Jul 22, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/poppler to version 0.79.0-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Jul 22, 2019 |
| Oracle_linux | — | Upgrade popplerUpgrade poppler-qt5Upgrade poppler-qt5-develUpgrade poppler-qt-develUpgrade evinceUpgrade poppler-demosUpgrade evince-libsUpgrade poppler-glib-develUpgrade evince-dviUpgrade evince-browser-pluginUpgrade poppler-utilsUpgrade poppler-qtUpgrade evince-develUpgrade poppler-cppUpgrade poppler-develUpgrade poppler-cpp-develUpgrade poppler-glibUpgrade evince-nautilus | Jul 21, 2020 | Jul 23, 2019 |
| Redhat_linux | — | Upgrade poppler-demosUpgrade poppler-qt5Upgrade poppler-utils-debuginfoUpgrade evince-dviUpgrade poppler-develUpgrade poppler-qt5-develUpgrade evince-libsUpgrade evinceUpgrade poppler-glibUpgrade poppler-debugsourceUpgrade poppler-qt-develNo solution existsUpgrade evince-debuginfoUpgrade poppler-debuginfoUpgrade poppler-qt5-debuginfoUpgrade poppler-cppUpgrade poppler-glib-develUpgrade poppler-cpp-debuginfoUpgrade poppler-glib-debuginfoUpgrade popplerUpgrade evince-nautilusUpgrade poppler-qtUpgrade evince-develUpgrade poppler-cpp-develUpgrade poppler-utilsUpgrade evince-browser-plugin | Sep 12, 2019 | Jul 22, 2019 |
| Suse | — | Upgrade poppler-toolsUpgrade libpoppler73Upgrade libpoppler-cpp0Upgrade libpoppler-develUpgrade libpoppler-glib-develUpgrade libpoppler73-32bitUpgrade libpoppler-glib8Upgrade typelib-1_0-Poppler-0_18 | Dec 2, 2021 | Jul 22, 2019 |
| Ubuntu | — | Upgrade libpoppler73Upgrade poppler-utilsUpgrade libpoppler58 | Nov 27, 2020 | Jul 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub