The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to allocate a large memory chunk on the heap, with a size controlled by an attacker, as demonstrated by pdftocairo.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade poppler | Nov 8, 2019 | Jul 22, 2019 |
| Amazon Linux Ami 2 | — | Upgrade poppler-utilsUpgrade popplerUpgrade poppler-cppUpgrade poppler-debuginfoUpgrade poppler-cpp-develUpgrade poppler-demosUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler-develUpgrade poppler-qt-develUpgrade poppler-glib-devel | Aug 25, 2020 | Jul 22, 2019 |
| Amazon_linux | — | Upgrade poppler | Jul 18, 2020 | Jul 22, 2019 |
| Centos_linux | — | Upgrade poppler-develUpgrade poppler-cpp-debuginfoUpgrade poppler-debuginfoUpgrade poppler-demosUpgrade poppler-qt5-debuginfoUpgrade poppler-qtUpgrade evince-libsUpgrade poppler-debugsourceUpgrade poppler-utilsUpgrade evince-nautilusUpgrade poppler-cpp-develUpgrade evince-browser-pluginUpgrade poppler-glib-develUpgrade evince-develUpgrade poppler-cppUpgrade poppler-glib-debuginfoUpgrade poppler-utils-debuginfoUpgrade poppler-qt-develUpgrade poppler-glibUpgrade evince-dviUpgrade popplerUpgrade evinceUpgrade evince-debuginfo | Sep 12, 2019 | Jul 22, 2019 |
| Debian | — | Upgrade poppler | Oct 18, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade popplerUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler-qt | Dec 4, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade popplerUpgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-qt | Sep 25, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-dataUpgrade poppler-qtUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler | Sep 24, 2019 | Jul 22, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-utilsUpgrade popplerUpgrade poppler-glibUpgrade poppler-qt | Aug 28, 2019 | Jul 22, 2019 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/poppler to version 0.79.0-11.4.14.0.1.1.0 on Solaris 11.4 | Oct 16, 2019 | Jul 22, 2019 |
| Oracle_linux | — | Upgrade evince-libsUpgrade poppler-qt5Upgrade poppler-qt5-develUpgrade evinceUpgrade poppler-qt-develUpgrade poppler-demosUpgrade popplerUpgrade poppler-qtUpgrade evince-nautilusUpgrade poppler-cpp-develUpgrade poppler-develUpgrade poppler-glib-develUpgrade poppler-glibUpgrade evince-dviUpgrade poppler-cppUpgrade poppler-utilsUpgrade evince-browser-pluginUpgrade evince-devel | Jul 21, 2020 | Jul 23, 2019 |
| Redhat_linux | — | Upgrade poppler-qt5-develUpgrade evince-debuginfoUpgrade poppler-glibUpgrade evince-libsUpgrade poppler-demosUpgrade poppler-qt-develUpgrade poppler-debuginfoUpgrade poppler-qt5Upgrade poppler-develNo solution existsUpgrade evince-dviUpgrade evinceUpgrade poppler-utils-debuginfoUpgrade poppler-debugsourceUpgrade poppler-qt5-debuginfoUpgrade evince-nautilusUpgrade poppler-glib-debuginfoUpgrade popplerUpgrade poppler-glib-develUpgrade poppler-cppUpgrade poppler-cpp-debuginfoUpgrade poppler-utilsUpgrade poppler-qtUpgrade evince-develUpgrade poppler-cpp-develUpgrade evince-browser-plugin | Sep 12, 2019 | Jul 22, 2019 |
| Suse | — | Upgrade libpoppler73-32bitUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-glib8Upgrade libpoppler-cpp0Upgrade libpoppler-glib-develUpgrade libpoppler73Upgrade libpoppler-develUpgrade poppler-tools | Dec 2, 2021 | Jul 22, 2019 |
| Ubuntu | — | Upgrade libpoppler73Upgrade poppler-utilsUpgrade libpoppler58 | Nov 27, 2020 | Jul 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub