poppler: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 3

• Unscored —
  CVE-2018-19058

  An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service becau…

  poppler poppler Debian Ubuntu
  Nov 7, 2018
• Unscored —
  CVE-2018-19059

  An issue was discovered in Poppler 0.71.0. There is a out-of-bounds read in EmbFile::save2 in FileSpec.cc, will lead to…

  poppler poppler Debian Ubuntu
  Nov 7, 2018
• Unscored —
  CVE-2018-19060

  An issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h, will lead to denial …

  poppler poppler Debian Ubuntu
  Nov 7, 2018

Revision history

1. 2023-07-20 #11

   Neue Updates von SUSE aufgenommen

2. 2022-09-25 #10

   Neue Updates von Debian aufgenommen

3. 2021-12-01 #9

   Neue Updates von SUSE aufgenommen

4. 2020-11-08 #8

   Neue Updates von Debian aufgenommen

5. 2019-08-06 #7

   Neue Updates von Red Hat aufgenommen

6. 2018-12-23 #6

   Referenz(en) aufgenommen: FEDORA-2018-679F8ABA03

7. 2018-12-20 #5

   Added references

8. 2018-12-16 #4

   New remediations available

9. 2018-12-04 #3

   New remediations available

10. 2018-11-15 #2

    Added references

11. 2018-11-07 #1

    Initial Release

References

• SUSE Security Update SUSE-SU-2023:2907-1 vom 2023-07-20
  https://lists.suse.com/pipermail/sle-security-updates/2023-July/015549.html
• SUSE Security Update SUSE-SU-2023:2906-1 vom 2023-07-20
  https://lists.suse.com/pipermail/sle-security-updates/2023-July/015550.html
• Einträge in gitlab vom 2018-11-07
  https://gitlab.freedesktop.org/poppler/poppler/issues/659
• Ubuntu Security Notice USN-3837-1 vom 2018-12-05
  http://www.ubuntu.com/usn/usn-3837-1
• Ubuntu Security Notice USN-3837-2 vom 2018-12-14
  https://usn.ubuntu.com/3837-2/
• Red Hat Security Advisory RHSA-2019:2022 vom 2019-08-06
  https://access.redhat.com/errata/RHSA-2019:2022
• Debian Security Advisory DLA-2440 vom 2020-11-09
  https://lists.debian.org/debian-lts-announce/2020/11/msg00014.html
• SUSE Security Update SUSE-SU-2021:3854-1 vom 2021-12-01
  https://lists.suse.com/pipermail/sle-security-updates/2021-December/009785.html
• Debian Security Advisory DLA-3120 vom 2022-09-26
  https://lists.debian.org/debian-lts-announce/2022/09/msg00030.html