A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0.74.0 that can (for example) be triggered by sending a crafted PDF file to the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.
{ "binaries": [ { "binary_name": "gir1.2-poppler-0.18", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "gir1.2-poppler-0.18-dbgsym", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "libpoppler-cpp-dev", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "libpoppler-cpp-dev-dbgsym", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "libpoppler-cpp0", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "libpoppler-cpp0-dbgsym", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "libpoppler-dev", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "libpoppler-dev-dbgsym", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "libpoppler-glib-dev", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "libpoppler-glib-dev-dbgsym", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "libpoppler-glib-doc", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "libpoppler-glib8", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "libpoppler-glib8-dbgsym", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "libpoppler-private-dev", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "libpoppler-private-dev-dbgsym", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "libpoppler-qt4-4", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "libpoppler-qt4-4-dbgsym", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "libpoppler-qt4-dev", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "libpoppler-qt4-dev-dbgsym", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "libpoppler-qt5-1", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "libpoppler-qt5-1-dbgsym", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "libpoppler-qt5-dev", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "libpoppler-qt5-dev-dbgsym", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "libpoppler44", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "libpoppler44-dbgsym", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "poppler-dbg", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "poppler-utils", "binary_version": "0.24.5-2ubuntu4.17" }, { "binary_name": "poppler-utils-dbgsym", "binary_version": "0.24.5-2ubuntu4.17" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "gir1.2-poppler-0.18", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "gir1.2-poppler-0.18-dbgsym", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "libpoppler-cpp-dev", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "libpoppler-cpp-dev-dbgsym", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "libpoppler-cpp0", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "libpoppler-cpp0-dbgsym", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "libpoppler-dev", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "libpoppler-dev-dbgsym", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "libpoppler-glib-dev", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "libpoppler-glib-dev-dbgsym", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "libpoppler-glib-doc", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "libpoppler-glib8", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "libpoppler-glib8-dbgsym", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "libpoppler-private-dev", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "libpoppler-private-dev-dbgsym", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "libpoppler-qt4-4", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "libpoppler-qt4-4-dbgsym", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "libpoppler-qt4-dev", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "libpoppler-qt4-dev-dbgsym", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "libpoppler-qt5-1", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "libpoppler-qt5-1-dbgsym", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "libpoppler-qt5-dev", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "libpoppler-qt5-dev-dbgsym", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "libpoppler58", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "libpoppler58-dbgsym", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "poppler-dbg", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "poppler-utils", "binary_version": "0.41.0-0ubuntu1.13" }, { "binary_name": "poppler-utils-dbgsym", "binary_version": "0.41.0-0ubuntu1.13" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "gir1.2-poppler-0.18", "binary_version": "0.62.0-2ubuntu2.8" }, { "binary_name": "libpoppler-cpp-dev", "binary_version": "0.62.0-2ubuntu2.8" }, { "binary_name": "libpoppler-cpp0v5", "binary_version": "0.62.0-2ubuntu2.8" }, { "binary_name": "libpoppler-cpp0v5-dbgsym", "binary_version": "0.62.0-2ubuntu2.8" }, { "binary_name": "libpoppler-dev", "binary_version": "0.62.0-2ubuntu2.8" }, { "binary_name": "libpoppler-glib-dev", "binary_version": "0.62.0-2ubuntu2.8" }, { "binary_name": "libpoppler-glib-doc", "binary_version": "0.62.0-2ubuntu2.8" }, { "binary_name": "libpoppler-glib8", "binary_version": "0.62.0-2ubuntu2.8" }, { "binary_name": "libpoppler-glib8-dbgsym", "binary_version": "0.62.0-2ubuntu2.8" }, { "binary_name": "libpoppler-private-dev", "binary_version": "0.62.0-2ubuntu2.8" }, { "binary_name": "libpoppler-qt5-1", "binary_version": "0.62.0-2ubuntu2.8" }, { "binary_name": "libpoppler-qt5-1-dbgsym", "binary_version": "0.62.0-2ubuntu2.8" }, { "binary_name": "libpoppler-qt5-dev", "binary_version": "0.62.0-2ubuntu2.8" }, { "binary_name": "libpoppler73", "binary_version": "0.62.0-2ubuntu2.8" }, { "binary_name": "libpoppler73-dbgsym", "binary_version": "0.62.0-2ubuntu2.8" }, { "binary_name": "poppler-utils", "binary_version": "0.62.0-2ubuntu2.8" }, { "binary_name": "poppler-utils-dbgsym", "binary_version": "0.62.0-2ubuntu2.8" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }