Security fix for CVE-2018-13988.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SLED15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3854-1 advisory.

    - CVE-2017-18267: Fixed an infinite recursion that would allow remote attackers to cause a denial of     service (bsc#1092945).
    - CVE-2018-13988: Added an improper implementation check which otherwise could allow buffer overflows,     memory corruption, and denial of service (bsc#1102531).
    - CVE-2018-16646: Fixed an infinite recursion which could allow a denial-of-service attack via a specially     crafted PDF file (bsc#1107597).
    - CVE-2018-18897: Fixed a memory leak (bsc#1114966).
    - CVE-2018-19058: Fixed a bug which could allow a denial-of-service attack via a specially crafted PDF     file (bsc#1115187).
    - CVE-2018-19059: Fixed an out-of-bounds read access which could allow a denial-of-service attack     (bsc#1115186).
    - CVE-2018-19060: Fixed a NULL pointer dereference which could allow a denial-of-service attack     (bsc#1115185).
    - CVE-2018-19149: Fixed a NULL pointer dereference which could allow a denial-of-service attack     (bsc#1115626).
    - CVE-2018-20481: Fixed a NULL pointer dereference while handling unallocated XRef entries which could     allow a denial-of-service attack (bsc#1120495).
    - CVE-2018-20551: Fixed a reachable assertion which could allow a denial-of-service attack through     specially crafted PDF files (bsc#1120496).
    - CVE-2018-20650: Fixed a reachable assertion which could allow denial-of-service through specially     crafted PDF files (bsc#1120939).
    - CVE-2018-20662: Fixed a bug which could potentially crash the running process by SIGABRT resulting in a     denial-of-service attack through a specially crafted PDF file (bsc#1120956).
    - CVE-2019-10871: Fixed a heap-based buffer  over-read in the function PSOutputDev::checkPageSlice at     PSOutputDev.cc (bsc#1131696).
    - CVE-2019-10872: Fixed a heap-based buffer over-read in the function Splash::blitTransparent at     splash/Splash.cc (bsc#1131722).
    - CVE-2019-14494: Fixed a divide-by-zero error in the function SplashOutputDev::tilingPatternFill     (bsc#1143950).
    - CVE-2019-7310: Fixed a heap-based buffer over-read (due to an integer signedness error in the     XRef::getEntry function in XRef.cc) that allows remote attackers to cause a denial of service or possibly     have unspecified other impact via a crafted PDF document (bsc#1124150).
    - CVE-2019-9200: Fixed a heap-based buffer underwrite which could allow denial-of-service attack through a     specially crafted PDF file (bsc#1127329)
    - CVE-2019-9631: Fixed a heap-based buffer over-read  in the CairoRescaleBox.cc downsample_row_box_filter     function (bsc#1129202).
    - CVE-2019-9903: Fixed excessive stack consumption in the Dict::find() method, which can be triggered by     passing a crafted pdf file to the pdfunite binary (bsc#1130229).
    - CVE-2019-9959: Fixed integer overflow that made it possible to allocate a large memory chunk on the heap     with a size controlled by an attacker (bsc#1142465).
    - CVE-2020-27778: Fixed buffer overflow vulnerability in pdftohtml (bsc#1179163).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update fixes CVE-2017-18267, CVE-2018-13988, CVE-2018-16646, CVE-2018-19058, CVE-2018-19059, CVE-2018-19060, CVE-2018-19149

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h. A crafted input will lead to a remote denial of service attack. Poppler versions later than 0.41.0 are not affected.(CVE-2018-10768)

The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler allows remote attackers to cause a denial of service (infinite recursion) via a crafted PDF file, as demonstrated by pdftops.(CVE-2017-18267)

Poppler contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by pdfunite. This can result in memory corruption and denial of service. This may be exploitable when a victim opens a specially crafted PDF file.(CVE-2018-13988)

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2907-1 advisory.

    - CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service     (bsc#1199272).
      - CVE-2018-21009: Fixed integer overflow in Parser:makeStream in Parser.cc (bsc#1149635).
      - CVE-2019-12293: Fixed heap-based buffer over-read in JPXStream:init in JPEG2000Stream.cc     (bsc#1136105).
      - CVE-2018-20481: Fixed memory leak in GfxColorSpace:setDisplayProfile in GfxState.cc (bsc#1114966).
      - CVE-2019-7310: Fixed a heap-based buffer over-read allows remote attackers to cause DOS via a special     crafted PDF (bsc#1124150).
      - CVE-2018-13988: Fixed buffer overflow in pdfunite (bsc#1102531).
      - CVE-2018-16646: Fixed infinite recursion in poppler/Parser.cc:Parser::getObj() function (bsc#1107597).
      - CVE-2018-19058: Fixed reachable abort in Object.h leading to denial of service (bsc#1115187).
      - CVE-2018-19059: Fixed out-of-bounds read in EmbFile:save2 in FileSpec.cc leading to denial of service     (bsc#1115186).
      - CVE-2018-19060: Fixed NULL pointer dereference in goo/GooString.h leading to denial of service     (bsc#1115185).
      - CVE-2018-19149: Fixed NULL pointer dereference in _poppler_attachment_new when called from     poppler_annot_file_attachment_get_attachment (bsc#1115626).
      - CVE-2017-18267: Fixed denial of service (infinite recursion) via a crafted PDF file (bsc#1092945).
      - CVE-2018-20650: Fixed issue where a reachable Object in dictLookup assertion allows attackers to cause     DOS (bsc#1120939).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2906-1 advisory.

    - CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service     (bsc#1199272).
      - CVE-2018-21009: Fixed integer overflow in Parser:makeStream in Parser.cc (bsc#1149635).
      - CVE-2018-20481: Fixed memory leak in GfxColorSpace:setDisplayProfile in GfxState.cc (bsc#1114966).
      - CVE-2019-7310: Fixed a heap-based buffer over-read allows remote attackers to cause DOS via a special     crafted PDF (bsc#1124150).
      - CVE-2018-13988: Fixed buffer overflow in pdfunite (bsc#1102531).
      - CVE-2018-16646: Fixed infinite recursion in poppler/Parser.cc:Parser::getObj() function (bsc#1107597).
      - CVE-2018-19058: Fixed reachable abort in Object.h leading to denial of service (bsc#1115187).
      - CVE-2018-19059: Fixed out-of-bounds read in EmbFile:save2 in FileSpec.cc leading to denial of service     (bsc#1115186).
      - CVE-2018-19060: Fixed NULL pointer dereference in goo/GooString.h leading to denial of service     (bsc#1115185).
      - CVE-2018-19149: Fixed NULL pointer dereference in _poppler_attachment_new when called from     poppler_annot_file_attachment_get_attachment (bsc#1115626).
      - CVE-2017-18267: Fixed denial of service (infinite recursion) via a crafted PDF file (bsc#1092945).
      - CVE-2018-20650: Fixed issue where a reachable Object in dictLookup assertion allows attackers to cause     DOS (bsc#1120939).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
111716	Fedora 27 : poppler (2018-e1f03d1f72)	Nessus	Fedora Local Security Checks	2018/8/15	2024/8/21	medium
155796	SUSE SLED15: libpoppler-cpp0 / libpoppler-devel / libpoppler-glib-devel / etc (SUSE-SU-2021:3854-1)	Nessus	SuSE Local Security Checks	2021/12/2	2026/6/26	critical
120243	Fedora 28 : mingw-poppler (2018-12b934e224)	Nessus	Fedora Local Security Checks	2019/1/3	2024/7/9	medium
125600	Amazon Linux 2 : poppler (ALAS-2019-1217)	Nessus	Amazon Linux Local Security Checks	2019/5/31	2024/5/17	medium
178693	SUSE SLES12: libpoppler-cpp0 / libpoppler-devel / libpoppler-glib-devel / etc (SUSE-SU-2023:2907-1)	Nessus	SuSE Local Security Checks	2023/7/21	2026/6/25	high
178695	SUSE SLES12 Security Update : poppler (SUSE-SU-2023:2906-1)	Nessus	SuSE Local Security Checks	2023/7/21	2026/6/25	high

检测

插件搜索

medium

critical

medium

medium

high

high