Описание
A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of service due to a failure in markObject.
A vulnerability was found in Poppler, where a reachable assertion allows attackers to cause a denial of service due to a failure in markObject.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | poppler | Out of support scope | ||
| Red Hat Enterprise Linux 7 | compat-poppler022 | Out of support scope | ||
| Red Hat Enterprise Linux 7 | poppler | Out of support scope | ||
| Red Hat Enterprise Linux 8 | cups-container | Not affected | ||
| Red Hat Enterprise Linux 8 | gimp-flatpak-container | Will not fix | ||
| Red Hat Enterprise Linux 8 | gimp:flatpak/poppler | Affected | ||
| Red Hat Enterprise Linux 8 | poppler | Affected | ||
| Red Hat Enterprise Linux 9 | cups-container | Not affected | ||
| Red Hat Enterprise Linux 9 | inkscape:flatpak/poppler | Not affected | ||
| Red Hat Enterprise Linux 9 | libreoffice-flatpak-container | Will not fix |
Показывать по
Дополнительная информация
Статус:
6.5 Medium
CVSS3
Связанные уязвимости
A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of service due to a failure in markObject.
A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of service due to a failure in markObject.
A reachable Object::getString assertion in Poppler 22.07.0 allows atta ...
A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of service due to a failure in markObject.
Уязвимость компонента Object::getString библиотеки для рендеринга PDF-файлов Poppler, позволяющая нарушителю вызвать отказ в обслуживании
6.5 Medium
CVSS3