Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-18897

Опубликовано: 01 нояб. 2018
Источник: redhat
CVSS3: 4.3
EPSS Низкий

Описание

An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo.

Отчет

This issue affects the versions of poppler as shipped with Red Hat Enterprise Linux 6 and 7. Red Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This has been rated as having a security impact of Low, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5popplerNot affected
Red Hat Enterprise Linux 6popplerWill not fix
Red Hat Enterprise Linux 7evinceFixedRHSA-2019:202206.08.2019
Red Hat Enterprise Linux 7okularFixedRHSA-2019:202206.08.2019
Red Hat Enterprise Linux 7popplerFixedRHSA-2019:202206.08.2019
Red Hat Enterprise Linux 8popplerFixedRHSA-2019:271312.09.2019

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-400
https://bugzilla.redhat.com/show_bug.cgi?id=1646546poppler: memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc

EPSS

Процентиль: 42%
0.002
Низкий

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 7 лет назад

An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo.

CVSS3: 6.5
nvd
почти 7 лет назад

An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo.

CVSS3: 6.5
debian
почти 7 лет назад

An issue was discovered in Poppler 0.71.0. There is a memory leak in G ...

CVSS3: 6.5
github
около 3 лет назад

An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo.

CVSS3: 6.5
fstec
почти 7 лет назад

Уязвимость компонента GfxState.cc библиотеки для отображения PDF-файлов Poppler, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 42%
0.002
Низкий

4.3 Medium

CVSS3