REDHAT-BUG-1649435: Low severity poppler data vulnerability

Published Nov 13, 2018

Updated

An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service because EmbFile::save2 in FileSpec.cc lacks a stream check before saving an embedded file.

References: https://gitlab.freedesktop.org/poppler/poppler/issues/659

Affected Software

1 affected component

Poppler Poppler

Event History

Nov 13, 2018

Data Sourced

via Red Hat·03:49 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1649435?

REDHAT-BUG-1649435 is classified as a denial of service vulnerability due to a reachable abort in Poppler 0.71.0.

How do I fix REDHAT-BUG-1649435?

To fix REDHAT-BUG-1649435, update to a patched version of Poppler that addresses this vulnerability.

What software is affected by REDHAT-BUG-1649435?

Poppler 0.71.0 is the affected version that contains the vulnerability identified in REDHAT-BUG-1649435.

Can REDHAT-BUG-1649435 lead to data loss?

While REDHAT-BUG-1649435 primarily results in a denial of service, it can disrupt normal operations and access to data.

Is there a workaround for REDHAT-BUG-1649435?

Currently, there are no recommended workarounds for REDHAT-BUG-1649435 aside from applying the relevant updates.