Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 160

Export CSV
CVE-2020-16127

accountsservice .pam_environment infinite loop

An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, would perform unbounded read operations on user-controlled ~/.pam_environment files, allowing an infinite loop if /dev/zero is symlinked to this location.

CVSS 3.1 · 2.8 Low EPSS < 1% KEV · Not listed
Vendors
Freedesktop
Products
Accountsservice
CVE-2020-16126

accountsservice drops ruid, allows unprivileged users to send it signals

An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, improperly dropped the ruid, allowing untrusted users to send signals to AccountService, thus stopping it from handling D-Bus messages in a timely fashion.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Freedesktop
Products
Accountsservice
CVE-2020-12049

dbus: denial of service via file descriptor leak

An issue was discovered in dbus >= 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local attacker with access to the D-Bus system bus or another system service's private AF_UNIX socket could use this to make the system service reach its file descriptor limit, denying service to subsequent D-Bus clients.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Freedesktop Redhat
Products
Ubuntu Linux Dbus Enterprise Linux and 2 more
CVE-2019-9959

poppler: integer overflow in JPXStream::init function leading to memory consumption

The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to allocate a large memory chunk on the heap, with a size controlled by an attacker, as demonstrated by pdftocairo.

CVSS 3.1 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Debian Fedoraproject Freedesktop and 1 more
Products
Debian Linux Fedora Poppler and 4 more
CVE-2019-9903

poppler: stack consumption in function Dict::find() in Dict.cc

PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function Dict::find() located at Dict.cc, which can (for example) be triggered by passing a crafted pdf file to the pdfunite binary.

CVSS 3.1 · 6.5 Medium EPSS 2.4% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 5 more
CVE-2019-9631

poppler: heap-based buffer over-read in function downsample_row_box_filter in CairoRescaleBox.cc

Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsample_row_box_filter function.

CVSS 3.0 · 9.8 Critical EPSS 3.5% KEV · Not listed
Vendors
Debian Fedoraproject Freedesktop and 1 more
Products
Debian Linux Fedora Poppler and 1 more
CVE-2019-9545

poppler: recursive function call in JBIG2Stream::readTextRegion() in JBIG2Stream.cc causing denial of service

An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JBIG2Bitmap::clearToZero.

CVSS 3.0 · 8.8 High EPSS 1.9% KEV · Not listed
Vendors
Freedesktop
Products
Poppler
CVE-2019-9543

poppler: recursive function call in JBIG2Stream::readGenericBitmap() in JBIG2Stream.cc causing denial of service

An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readGenericBitmap() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfseparate binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JArithmeticDecoder::decodeBit.

CVSS 3.0 · 8.8 High EPSS 3.3% KEV · Not listed
Vendors
Freedesktop
Products
Poppler
CVE-2019-9200

poppler: heap-based buffer overflow in function ImageStream::getLine() in Stream.cc

A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0.74.0 that can (for example) be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.

CVSS 3.0 · 8.8 High EPSS 3.5% KEV · Not listed
Vendors
Canonical Debian Freedesktop and 1 more
Products
Ubuntu Linux Debian Linux Poppler and 1 more
CVE-2019-7310

poppler: heap-based buffer over-read in XRef::getEntry in XRef.cc

In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef::getEntry function in XRef.cc) allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document, as demonstrated by pdftocairo.

CVSS 3.1 · 7.8 High EPSS 2.1% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 8 more
CVE-2019-14494

poppler: divide-by-zero in function SplashOutputDev::tilingPatternFill in SplashOutputDev.cc

An issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the function SplashOutputDev::tilingPatternFill at SplashOutputDev.cc.

CVSS 3.1 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 2 more
CVE-2019-12293

poppler: heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc

In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc via data with inconsistent heights or widths.

CVSS 3.0 · 8.8 High EPSS 2.1% KEV · Not listed
Vendors
Freedesktop Redhat
Products
Poppler Enterprise Linux
CVE-2019-11026

poppler: infinite recursion in function FontInfoScanner::scanFonts in FontInfo.cc

FontInfoScanner::scanFonts in FontInfo.cc in Poppler 0.75.0 has infinite recursion, leading to a call to the error function in Error.cc.

CVSS 3.1 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Fedoraproject Freedesktop
Products
Fedora Poppler
CVE-2019-10873

poppler: null-pointer dereference in function SplashClip::clipAALine in splash/SplashClip.cc

An issue was discovered in Poppler 0.74.0. There is a NULL pointer dereference in the function SplashClip::clipAALine at splash/SplashClip.cc.

CVSS 3.0 · 6.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Freedesktop
Products
Poppler
CVE-2019-10872

poppler: heap-based buffer over-read in function Splash::blitTransparent in splash/Splash.cc

An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function Splash::blitTransparent at splash/Splash.cc.

CVSS 3.0 · 8.8 High EPSS 2.7% KEV · Not listed
Vendors
Freedesktop
Products
Poppler
CVE-2019-10871

poppler: heap-based buffer over-read in function PSOutputDev::checkPageSlice in PSOutputDev.cc

An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function PSOutputDev::checkPageSlice at PSOutputDev.cc.

CVSS 3.0 · 6.5 Medium EPSS 2.5% KEV · Not listed
Vendors
Freedesktop Redhat
Products
Poppler Enterprise Linux
CVE-2018-20662

poppler: SIGABRT PDFDoc::setup class in PDFDoc.cc

In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup) by crafting a PDF file in which an xref data structure is mishandled during extractPDFSubtype processing.

CVSS 3.1 · 6.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 8 more
CVE-2018-20650

poppler: reachable Object::dictLookup assertion in FileSpec class in FileSpec.cc

A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lack of a check for the dict data type, as demonstrated by use of the FileSpec class (in FileSpec.cc) in pdfdetach.

CVSS 3.1 · 6.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Canonical Debian Freedesktop and 1 more
Products
Ubuntu Linux Debian Linux Poppler and 7 more
CVE-2018-20551

poppler: reachable Object::getString assertion in AnnotRichMedia class in Annot.c

A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Canonical Freedesktop Redhat
Products
Ubuntu Linux Poppler Enterprise Linux