Описание
Security update for poppler
This update for poppler fixes the following issues:
- CVE-2019-13283: Fixed heap-based buffer over-read that could be triggered by sending a crafted PDF document to the pdftotext tool (bsc#1140877).
Список пакетов
SUSE Linux Enterprise Software Development Kit 12 SP5
libpoppler44-0.24.4-14.23.1
Ссылки
- Link for SUSE-SU-2023:0496-1
- E-Mail link for SUSE-SU-2023:0496-1
- SUSE Security Ratings
- SUSE Bug 1140877
- SUSE CVE CVE-2019-13283 page
Описание
In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in strncpy from FoFiType1::parse in fofi/FoFiType1.cc because it does not ensure the source string has a valid length before making a fixed-length copy. It can, for example, be triggered by sending a crafted PDF document to the pdftotext tool. It allows an attacker to use a crafted pdf file to cause Denial of Service or an information leak, or possibly have unspecified other impact.
Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:libpoppler44-0.24.4-14.23.1
Ссылки
- CVE-2019-13283
- SUSE Bug 1140877