CVE-2018-19149

Опубликовано: 10 нояб. 2018

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment.

Ссылки

http://www.securityfocus.com/bid/106031
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2019:2022
https://gitlab.freedesktop.org/poppler/poppler/issues/664
Exploit
Issue Tracking
Third Party Advisory
https://security.gentoo.org/glsa/201904-04
Third Party Advisory
https://usn.ubuntu.com/3837-1/
Third Party Advisory
https://usn.ubuntu.com/3837-2/
Third Party Advisory
http://www.securityfocus.com/bid/106031
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2019:2022
https://gitlab.freedesktop.org/poppler/poppler/issues/664
Exploit
Issue Tracking
Third Party Advisory
https://security.gentoo.org/glsa/201904-04
Third Party Advisory
https://usn.ubuntu.com/3837-1/
Third Party Advisory
https://usn.ubuntu.com/3837-2/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:freedesktop:poppler:*:*:*:*:*:*:*:*

Версия до 0.70.0 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*

EPSS

Процентиль: 43%

0.002

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2018-19149

CVSS3: 6.5

ubuntu

больше 6 лет назад

Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment.

CVE-2018-19149

CVSS3: 3.3

redhat

больше 6 лет назад

Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment.

CVE-2018-19149

CVSS3: 6.5

debian

больше 6 лет назад

Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attac ...

GHSA-8334-q57q-jpp2

CVSS3: 6.5

github

около 3 лет назад

Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment.

ELSA-2019-2022

oracle-oval

почти 6 лет назад

ELSA-2019-2022: poppler security, bug fix, and enhancement update (MODERATE)

EPSS

Процентиль: 43%

0.002

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476