An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-2979 advisory.

    - Fix crash when Object has negative number (CVE-2018-13988)
    - Fix infinite recursion (CVE-2017-18267)
    - Resolves: rhbz#1494583 CVE-2017-14520
    - Resolves: rhbz#1459067 CVE-2017-7515 CVE-2017-9775 CVE-2017-9776 CVE-2017-9865
    - Resolves: rhbz#1456828 CVE-2017-7511 Null pointer deference
    - Remove CVE-2010-3702, 3703 and 3704 patches (they are already in 0.15.1)
    - Add poppler-0.15.0-CVE-2010-3702.patch         (Properly initialize parser)
    - Add poppler-0.15.0-CVE-2010-3703.patch         (Properly initialize stack)
    - Add poppler-0.15.0-CVE-2010-3704.patch         (Fix crash in broken pdf (code < 0))
    - CVE-2009-3607 poppler: create_surface_from_thumbnail_data       integer overflow (#526924)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:2979 advisory.

    Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

    Security Fix(es):

    * poppler: NULL pointer dereference in `FoFiType1C::convertToType1` (CVE-2020-36024)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.10 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2024:2979 advisory.

  - An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial     of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function. (CVE-2020-36024)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3998-1 advisory.

  - Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial     of service via crafted input. (CVE-2020-23804)

  - An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial     of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function. (CVE-2020-36024)

  - In Poppler 22.07.0, PDFDoc::savePageAs in PDFDoc.c callows attackers to cause a denial-of-service     (application crashes with SIGABRT) by crafting a PDF file in which the xref data structure is mishandled     in getCatalog processing. Note that this vulnerability is caused by the incomplete patch of     CVE-2018-20662. (CVE-2022-37050)

  - An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of service     because the main function in pdfunite.cc lacks a stream check before saving an embedded file.
    (CVE-2022-37051)

  - An issue was discovered in Poppler 22.08.0. There is a reachable assertion in Object.h, will lead to     denial of service because PDFDoc::replacePageDict in PDFDoc.cc lacks a stream check before saving an     embedded file. (CVE-2022-38349)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of poppler installed on the remote host is prior to 0.26.5-43.26. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1850 advisory.

    An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial     of service (DoS) via crafted .pdf file to FoFiType1C::cvtGlyph function. (CVE-2020-36023)

    An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial     of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function. (CVE-2020-36024)

    An issue was discovered in Poppler 22.08.0. There is a reachable assertion in Object.h, will lead to     denial of service because PDFDoc::replacePageDict in PDFDoc.cc lacks a stream check before saving an     embedded file. (CVE-2022-38349)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3981-1 advisory.

  - Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial     of service via crafted input. (CVE-2020-23804)

  - An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial     of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function. (CVE-2020-36024)

  - In Poppler 22.07.0, PDFDoc::savePageAs in PDFDoc.c callows attackers to cause a denial-of-service     (application crashes with SIGABRT) by crafting a PDF file in which the xref data structure is mishandled     in getCatalog processing. Note that this vulnerability is caused by the incomplete patch of     CVE-2018-20662. (CVE-2022-37050)

  - An issue was discovered in Poppler 22.08.0. There is a reachable assertion in Object.h, will lead to     denial of service because PDFDoc::replacePageDict in PDFDoc.cc lacks a stream check before saving an     embedded file. (CVE-2022-38349)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3983-1 advisory.

  - Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial     of service via crafted input. (CVE-2020-23804)

  - An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial     of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function. (CVE-2020-36024)

  - In Poppler 22.07.0, PDFDoc::savePageAs in PDFDoc.c callows attackers to cause a denial-of-service     (application crashes with SIGABRT) by crafting a PDF file in which the xref data structure is mishandled     in getCatalog processing. Note that this vulnerability is caused by the incomplete patch of     CVE-2018-20662. (CVE-2022-37050)

  - An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of service     because the main function in pdfunite.cc lacks a stream check before saving an embedded file.
    (CVE-2022-37051)

  - An issue was discovered in Poppler 22.08.0. There is a reachable assertion in Object.h, will lead to     denial of service because PDFDoc::replacePageDict in PDFDoc.cc lacks a stream check before saving an     embedded file. (CVE-2022-38349)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3982-1 advisory.

  - Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial     of service via crafted input. (CVE-2020-23804)

  - An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial     of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function. (CVE-2020-36024)

  - In Poppler 22.07.0, PDFDoc::savePageAs in PDFDoc.c callows attackers to cause a denial-of-service     (application crashes with SIGABRT) by crafting a PDF file in which the xref data structure is mishandled     in getCatalog processing. Note that this vulnerability is caused by the incomplete patch of     CVE-2018-20662. (CVE-2022-37050)

  - An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of service     because the main function in pdfunite.cc lacks a stream check before saving an embedded file.
    (CVE-2022-37051)

  - An issue was discovered in Poppler 22.08.0. There is a reachable assertion in Object.h, will lead to     denial of service because PDFDoc::replacePageDict in PDFDoc.cc lacks a stream check before saving an     embedded file. (CVE-2022-38349)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of poppler installed on the remote host is prior to 0.26.5-43. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2281 advisory.

    An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial     of service (DoS) via crafted .pdf file to FoFiType1C::cvtGlyph function. (CVE-2020-36023)

    An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial     of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function. (CVE-2020-36024)

    An issue was discovered in Poppler 22.08.0. There is a reachable assertion in Object.h, will lead to     denial of service because PDFDoc::replacePageDict in PDFDoc.cc lacks a stream check before saving an     embedded file. (CVE-2022-38349)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6299-1 advisory.

    It was discovered that poppler incorrectly handled certain malformed PDF files. If a user or an automated     system were tricked into opening a specially crafted PDF file, a remote attacker could possibly use this     issue to cause a denial of service. (CVE-2020-36023, CVE-2020-36024)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3528 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3528-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Adrian Bunk     August 14, 2023                               https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : poppler     Version        : 0.71.0-5+deb10u2     CVE ID         : CVE-2020-36023 CVE-2020-36024

    Two vulnerabilities have been fixed in poppler,     a PDF rendering library.

    CVE-2020-36023

        Infinite loop in FoFiType1C::cvtGlyph()

    CVE-2020-36024

        NULL dereference in FoFiType1C::convertToType1()

    For Debian 10 buster, these problems have been fixed in version     0.71.0-5+deb10u2.

    We recommend that you upgrade your poppler packages.

    For the detailed security status of poppler please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/poppler

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
198001	Oracle Linux 8 : poppler (ELSA-2024-2979)	Nessus	Oracle Linux Local Security Checks	medium
197767	RHEL 8 : poppler (RHSA-2024:2979)	Nessus	Red Hat Local Security Checks	medium
197653	CentOS 8 : poppler (CESA-2024:2979)	Nessus	CentOS Local Security Checks	medium
182744	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : poppler (SUSE-SU-2023:3998-1)	Nessus	SuSE Local Security Checks	high
182717	Amazon Linux AMI : poppler (ALAS-2023-1850)	Nessus	Amazon Linux Local Security Checks	medium
182674	SUSE SLES12 Security Update : poppler (SUSE-SU-2023:3981-1)	Nessus	SuSE Local Security Checks	high
182672	SUSE SLES15 / openSUSE 15 Security Update : poppler (SUSE-SU-2023:3983-1)	Nessus	SuSE Local Security Checks	high
182670	SUSE SLES12 Security Update : poppler (SUSE-SU-2023:3982-1)	Nessus	SuSE Local Security Checks	high
182632	Amazon Linux 2 : poppler (ALAS-2023-2281)	Nessus	Amazon Linux Local Security Checks	medium
179941	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : poppler vulnerabilities (USN-6299-1)	Nessus	Ubuntu Local Security Checks	medium
179808	Debian dla-3528 : gir1.2-poppler-0.18 - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2020-36024

medium

Tenable Plugins

medium

medium

medium

high

medium

high

high

high

medium

medium

medium