Описание
freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | poppler | Will not fix | ||
| Red Hat Enterprise Linux 6 | poppler | Will not fix | ||
| Red Hat Enterprise Linux 7 | poppler | Will not fix | ||
| Red Hat Enterprise Linux 8 | poppler | Not affected |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=1531382poppler: Invalid read in TextPool::addWord() causes crash and can lead to overflow in subsequent calculations
EPSS
Процентиль: 79%
0.01968
Низкий
7.3 High
CVSS3
Связанные уязвимости
CVSS3: 8.8
ubuntu
больше 8 лет назад
freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations.
CVSS3: 8.8
nvd
больше 8 лет назад
freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations.
CVSS3: 8.8
debian
больше 8 лет назад
freedesktop.org libpoppler 0.60.1 fails to validate boundaries in Text ...
CVSS3: 8.8
github
больше 4 лет назад
freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations.
EPSS
Процентиль: 79%
0.01968
Низкий
7.3 High
CVSS3