The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to allocate a large memory chunk on the heap, with a size controlled by an attacker, as demonstrated by pdftocairo.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade poppler | Nov 8, 2019 | Jul 22, 2019 |
| Amazon Linux Ami 2 | — | Upgrade poppler-glib-develUpgrade poppler-develUpgrade poppler-qt-develUpgrade poppler-qtUpgrade poppler-cpp-develUpgrade poppler-demosUpgrade poppler-cppUpgrade poppler-debuginfoUpgrade poppler-utilsUpgrade popplerUpgrade poppler-glib | Aug 25, 2020 | Jul 22, 2019 |
| Amazon_linux | — | Upgrade poppler | Jul 18, 2020 | Jul 22, 2019 |
| Centos_linux | — | Upgrade evince-develUpgrade poppler-glib-develUpgrade poppler-glibUpgrade poppler-qt-develUpgrade popplerUpgrade poppler-glib-debuginfoUpgrade poppler-utils-debuginfoUpgrade evince-debuginfoUpgrade poppler-cppUpgrade evinceUpgrade evince-dviUpgrade evince-browser-pluginUpgrade poppler-debuginfoUpgrade poppler-utilsUpgrade evince-libsUpgrade poppler-cpp-debuginfoUpgrade poppler-qtUpgrade poppler-cpp-develUpgrade evince-nautilusUpgrade poppler-qt5-debuginfoUpgrade poppler-develUpgrade poppler-debugsourceUpgrade poppler-demos | Sep 12, 2019 | Jul 22, 2019 |
| Debian | — | Upgrade poppler | Oct 18, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler | Dec 4, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-utilsUpgrade popplerUpgrade poppler-glibUpgrade poppler-qt | Sep 25, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade popplerUpgrade poppler-dataUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler-utils | Sep 24, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-qtUpgrade poppler | Aug 28, 2019 | Jul 22, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/poppler to version 0.79.0-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Jul 22, 2019 |
| Oracle_linux | — | Upgrade poppler-qtUpgrade evince-dviUpgrade poppler-glibUpgrade evince-browser-pluginUpgrade evince-nautilusUpgrade poppler-develUpgrade evince-develUpgrade poppler-cppUpgrade poppler-utilsUpgrade poppler-glib-develUpgrade poppler-cpp-develUpgrade evinceUpgrade poppler-qt5Upgrade popplerUpgrade poppler-qt5-develUpgrade evince-libsUpgrade poppler-qt-develUpgrade poppler-demos | Jul 21, 2020 | Jul 23, 2019 |
| Redhat_linux | — | Upgrade poppler-qt5-debuginfoUpgrade evince-browser-pluginUpgrade poppler-cpp-debuginfoUpgrade poppler-cppUpgrade popplerUpgrade evince-develUpgrade poppler-cpp-develUpgrade poppler-glib-develUpgrade poppler-utilsUpgrade evince-nautilusUpgrade poppler-qtUpgrade poppler-glib-debuginfoUpgrade poppler-debugsourceUpgrade evinceUpgrade evince-debuginfoUpgrade poppler-qt5Upgrade poppler-demosUpgrade evince-libsNo solution existsUpgrade poppler-utils-debuginfoUpgrade poppler-qt-develUpgrade poppler-debuginfoUpgrade poppler-glibUpgrade poppler-qt5-develUpgrade evince-dviUpgrade poppler-devel | Sep 12, 2019 | Jul 22, 2019 |
| Suse | — | Upgrade poppler-toolsUpgrade libpoppler73-32bitUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-develUpgrade libpoppler-cpp0Upgrade libpoppler-glib8Upgrade libpoppler-glib-develUpgrade libpoppler73 | Dec 2, 2021 | Jul 22, 2019 |
| Ubuntu | — | Upgrade libpoppler58Upgrade poppler-utilsUpgrade libpoppler73 | Nov 27, 2020 | Jul 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub