Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 160

Export CSV
CVE-2018-20481

poppler: NULL pointer dereference in the XRef::getEntry in XRef.cc

XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PDF document, when XRefEntry::setFlag in XRef.h is called from Parser::makeStream in Parser.cc.

CVSS 3.0 · 6.5 Medium EPSS 3.3% KEV · Not listed
Vendors
Canonical Debian Freedesktop and 1 more
Products
Ubuntu Linux Debian Linux Poppler and 1 more
CVE-2018-19060

poppler: pdfdetach utility does not validate save paths

An issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating a filename of an embedded file before constructing a save path.

CVSS 3.0 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Canonical Freedesktop Redhat
Products
Ubuntu Linux Poppler Enterprise Linux
CVE-2018-19059

poppler: out-of-bounds read in EmbFile::save2 in FileSpec.cc

An issue was discovered in Poppler 0.71.0. There is a out-of-bounds read in EmbFile::save2 in FileSpec.cc, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating embedded files before save attempts.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Canonical Freedesktop Redhat
Products
Ubuntu Linux Poppler Enterprise Linux
CVE-2018-19058

poppler: reachable abort in Object.h

An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service because EmbFile::save2 in FileSpec.cc lacks a stream check before saving an embedded file.

CVSS 3.1 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Canonical Debian Freedesktop and 1 more
Products
Ubuntu Linux Debian Linux Poppler and 4 more
CVE-2018-18897

poppler: memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc

An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo.

CVSS 3.1 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Canonical Debian Freedesktop and 1 more
Products
Ubuntu Linux Debian Linux Poppler and 7 more
CVE-2018-17336

udisks: Format string vulnerability in udisks_log in udiskslogging.c

UDisks 2.8.0 has a format string vulnerability in udisks_log in udiskslogging.c, allowing attackers to obtain sensitive information (stack contents), cause a denial of service (memory corruption), or possibly have unspecified other impact via a malformed filesystem label, as demonstrated by %d or %n substrings.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Freedesktop Redhat
Products
Ubuntu Linux Udisks Enterprise Linux
CVE-2018-16646

poppler: infinite recursion in Parser::getObj function in Parser.cc

In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack.

CVSS 3.0 · 6.5 Medium EPSS 2.9% KEV · Not listed
Vendors
Canonical Debian Freedesktop and 1 more
Products
Ubuntu Linux Debian Linux Poppler and 1 more
CVE-2018-14036

accountsservice: insufficient path check in user_change_icon_file_authorized_cb() in user.c

Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in user_change_icon_file_authorized_cb() in user.c.

CVSS 3.0 · 6.5 Medium EPSS 3.0% KEV · Not listed
Vendors
Freedesktop Redhat
Products
Accountsservice Enterprise Linux
CVE-2018-13988

poppler: out of bounds read in pdfunite

Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by pdfunite. This can result in memory corruption and denial of service. This may be exploitable when a victim opens a specially crafted PDF file.

CVSS 3.0 · 6.5 Medium EPSS 3.1% KEV · Not listed
Vendors
Canonical Debian Freedesktop and 1 more
Products
Ubuntu Linux Debian Linux Poppler and 6 more
CVE-2018-10768

poppler: NULL pointer dereference in Annot.h:AnnotPath::getCoordsLength() allows for denial of service via crafted PDF

There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5. A crafted input will lead to a remote denial of service attack. Later Ubuntu packages such as for Poppler 0.41.0 are not affected.

CVSS 3.0 · 6.5 Medium EPSS 2.4% KEV · Not listed
Vendors
Canonical Debian Freedesktop and 1 more
Products
Ubuntu Linux Debian Linux Poppler and 5 more
CVE-2017-2626

libICE: weak entropy usage in session keys

It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for session hijacking using the information available from the process list.

CVSS 3.0 · 5.2 Medium EPSS < 1% KEV · Not listed
Vendors
Freedesktop Redhat
Products
Libice Enterprise Linux Enterprise Linux Desktop and 4 more
CVE-2017-18267

poppler: Infinite recursion in fofi/FoFiType1C.cc:FoFiType1C::cvtGlyph() function allows denial of service

The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote attackers to cause a denial of service (infinite recursion) via a crafted PDF file, as demonstrated by pdftops.

CVSS 3.0 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Canonical Debian Freedesktop and 1 more
Products
Ubuntu Linux Debian Linux Poppler and 5 more
CVE-2017-18266

xdg-utils: Argument injection vulnerability in open_envvar() function

The open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by %s in this environment variable.

CVSS 3.0 · 8.8 High EPSS 2.4% KEV · Not listed
Vendors
Canonical Debian Freedesktop
Products
Ubuntu Linux Debian Linux Xdg-utils
CVE-2017-15131

gnome-session: Xsession creation of XDG user directories does not honor system umask policy

It was found that system umask policy is not being honored when creating XDG user directories, since Xsession sources xdg-user-dirs.sh before setting umask policy. This only affects xdg-user-dirs before 0.15.5 as shipped with Red Hat Enterprise Linux.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Freedesktop Redhat
Products
Xdg-user-dirs Enterprise Linux
CVE-2017-1000456

poppler: Invalid read in TextPool::addWord() causes crash and can lead to overflow in subsequent calculations

freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations.

CVSS 3.0 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Debian Freedesktop
Products
Debian Linux Poppler
CVE-2015-1877

xdg-utils: command injection vulnerability due to local variables collision in xdg-open

The open_generic_xdg_mime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash, does not properly handle local variables, which allows remote attackers to execute arbitrary commands via a crafted file.

CVSS 3.1 · 8.8 High EPSS 3.2% KEV · Not listed
Vendors
Debian Freedesktop
Products
Debian Linux Xdg-utils
CVE-2012-2142

xpdf: Insufficient sanitization of escape sequences in the error messages

The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator.

CVSS 3.1 · 7.8 High EPSS 2.9% KEV · Not listed
Vendors
Freedesktop Opensuse Redhat and 1 more
Products
Poppler Opensuse Enterprise Linux and 1 more
CVE-2010-4654

xpdf: corruption of the Gfx contexts states stack

poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack.

CVSS 3.1 · 7.8 High EPSS 1.2% KEV · Not listed
Vendors
Debian Freedesktop
Products
Debian Linux Poppler
CVE-2010-4653

xpdf: integer overflow in CharCodeToUnicode::addMapping

An integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts.

CVSS 3.1 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Debian Freedesktop
Products
Debian Linux Poppler