The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to allocate a large memory chunk on the heap, with a size controlled by an attacker, as demonstrated by pdftocairo.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade poppler | Nov 8, 2019 | Jul 22, 2019 |
| Amazon Linux Ami 2 | — | Upgrade poppler-utilsUpgrade poppler-demosUpgrade poppler-qtUpgrade popplerUpgrade poppler-glibUpgrade poppler-cppUpgrade poppler-debuginfoUpgrade poppler-cpp-develUpgrade poppler-qt-develUpgrade poppler-glib-develUpgrade poppler-devel | Aug 25, 2020 | Jul 22, 2019 |
| Amazon_linux | — | Upgrade poppler | Jul 18, 2020 | Jul 22, 2019 |
| Centos_linux | — | Upgrade evince-dviUpgrade evinceUpgrade poppler-glib-develUpgrade poppler-glibUpgrade poppler-utils-debuginfoUpgrade evince-develUpgrade poppler-qt-develUpgrade poppler-glib-debuginfoUpgrade evince-debuginfoUpgrade popplerUpgrade poppler-cppUpgrade poppler-debuginfoUpgrade poppler-develUpgrade evince-browser-pluginUpgrade poppler-utilsUpgrade evince-nautilusUpgrade poppler-qtUpgrade poppler-qt5-debuginfoUpgrade poppler-demosUpgrade evince-libsUpgrade poppler-cpp-debuginfoUpgrade poppler-cpp-develUpgrade poppler-debugsource | Sep 12, 2019 | Jul 22, 2019 |
| Debian | — | Upgrade poppler | Oct 18, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade poppler-utilsUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler | Dec 4, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-qtUpgrade poppler | Sep 25, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-dataUpgrade poppler-utilsUpgrade popplerUpgrade poppler-qtUpgrade poppler-glib | Sep 24, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-utilsUpgrade popplerUpgrade poppler-glibUpgrade poppler-qt | Aug 28, 2019 | Jul 22, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/poppler to version 0.79.0-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Jul 22, 2019 |
| Oracle_linux | — | Upgrade poppler-qtUpgrade poppler-cppUpgrade evince-dviUpgrade poppler-utilsUpgrade poppler-glibUpgrade evince-develUpgrade poppler-develUpgrade poppler-glib-develUpgrade evince-nautilusUpgrade poppler-cpp-develUpgrade evince-browser-pluginUpgrade evinceUpgrade poppler-qt-develUpgrade popplerUpgrade evince-libsUpgrade poppler-qt5-develUpgrade poppler-qt5Upgrade poppler-demos | Jul 21, 2020 | Jul 23, 2019 |
| Redhat_linux | — | Upgrade poppler-cpp-develUpgrade popplerUpgrade poppler-cppUpgrade evince-browser-pluginUpgrade evince-nautilusUpgrade poppler-cpp-debuginfoUpgrade poppler-utilsUpgrade poppler-qt5-debuginfoUpgrade poppler-qtUpgrade evince-develUpgrade poppler-glib-debuginfoUpgrade poppler-glib-develUpgrade evince-libsUpgrade poppler-qt5Upgrade poppler-demosUpgrade poppler-debuginfoUpgrade poppler-debugsourceUpgrade poppler-utils-debuginfoUpgrade evince-dviUpgrade poppler-qt5-develUpgrade poppler-develUpgrade evince-debuginfoUpgrade poppler-qt-develUpgrade evinceNo solution existsUpgrade poppler-glib | Sep 12, 2019 | Jul 22, 2019 |
| Suse | — | Upgrade libpoppler73-32bitUpgrade libpoppler-glib-develUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-cpp0Upgrade libpoppler-develUpgrade libpoppler73Upgrade libpoppler-glib8Upgrade poppler-tools | Dec 2, 2021 | Jul 22, 2019 |
| Ubuntu | — | Upgrade libpoppler58Upgrade poppler-utilsUpgrade libpoppler73 | Nov 27, 2020 | Jul 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub