CVE-2018-20650
- Source
- https://cve.org/CVERecord?id=CVE-2018-20650
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20650.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2018-20650
- Downstream
- Related
- Published
- 2019-01-01T16:29:00.233Z
- Modified
- 2026-07-08T16:40:32.983255Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lack of a check for the dict data type, as demonstrated by use of the FileSpec class (in FileSpec.cc) in pdfdetach.
- Database specific
{ "unresolved_ranges": [ { "source": "CPE_STRING", "vendor_product": "canonical:ubuntu_linux", "extracted_events": [ { "introduced": "14.04" }, { "last_affected": "14.04" }, { "introduced": "16.04" }, { "last_affected": "16.04" }, { "introduced": "18.04" }, { "last_affected": "18.04" }, { "introduced": "18.10" }, { "last_affected": "18.10" } ], "cpes": [ "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*", "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*" ] }, { "source": "CPE_STRING", "vendor_product": "debian:debian_linux", "extracted_events": [ { "introduced": "8.0" }, { "last_affected": "8.0" }, { "introduced": "9.0" }, { "last_affected": "9.0" }, { "introduced": "10.0" }, { "last_affected": "10.0" } ], "cpes": [ "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" ] }, { "source": "CPE_STRING", "vendor_product": "redhat:enterprise_linux", "extracted_events": [ { "introduced": "8.0" }, { "last_affected": "8.0" } ], "cpes": [ "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*" ] }, { "source": "CPE_STRING", "vendor_product": "redhat:enterprise_linux_desktop", "extracted_events": [ { "introduced": "7.0" }, { "last_affected": "7.0" } ], "cpes": [ "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*" ] }, { "source": "CPE_STRING", "vendor_product": "redhat:enterprise_linux_eus", "extracted_events": [ { "introduced": "8.1" }, { "last_affected": "8.1" }, { "introduced": "8.2" }, { "last_affected": "8.2" }, { "introduced": "8.4" }, { "last_affected": "8.4" }, { "introduced": "8.6" }, { "last_affected": "8.6" } ], "cpes": [ "cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*" ] }, { "source": "CPE_STRING", "vendor_product": "redhat:enterprise_linux_server", "extracted_events": [ { "introduced": "7.0" }, { "last_affected": "7.0" } ], "cpes": [ "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*" ] }, { "source": "CPE_STRING", "vendor_product": "redhat:enterprise_linux_server_aus", "extracted_events": [ { "introduced": "8.2" }, { "last_affected": "8.2" }, { "introduced": "8.4" }, { "last_affected": "8.4" }, { "introduced": "8.6" }, { "last_affected": "8.6" } ], "cpes": [ "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*" ] }, { "source": "CPE_STRING", "vendor_product": "redhat:enterprise_linux_server_tus", "extracted_events": [ { "introduced": "8.2" }, { "last_affected": "8.2" }, { "introduced": "8.4" }, { "last_affected": "8.4" }, { "introduced": "8.6" }, { "last_affected": "8.6" } ], "cpes": [ "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*", "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*" ] }, { "source": "CPE_STRING", "vendor_product": "redhat:enterprise_linux_workstation", "extracted_events": [ { "introduced": "7.0" }, { "last_affected": "7.0" } ], "cpes": [ "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*" ] } ] }- References
-
- http://www.securityfocus.com/bid/106459
- https://access.redhat.com/errata/RHSA-2019:2022
- https://access.redhat.com/errata/RHSA-2019:2713
- https://lists.debian.org/debian-lts-announce/2019/09/msg00033.html
- https://lists.debian.org/debian-lts-announce/2020/11/msg00014.html
- https://lists.debian.org/debian-lts-announce/2022/09/msg00030.html
- https://usn.ubuntu.com/3865-1/
- https://gitlab.freedesktop.org/poppler/poppler/commit/de0c0b8324e776f0b851485e0fc9622fc35695b7
- https://gitlab.freedesktop.org/poppler/poppler/issues/704
Affected packages
Git / gitlab.freedesktop.org/poppler/poppler
Affected ranges
- Type
- GIT
- Repo
- https://gitlab.freedesktop.org/poppler/poppler
- Events
-
IntroducedLast affectedFixed
- Database specific
{ "cpe": "cpe:2.3:a:freedesktop:poppler:0.72.0:*:*:*:*:*:*:*", "source": [ "CPE_STRING", "REFERENCES" ], "extracted_events": [ { "introduced": "0.72.0" }, { "last_affected": "0.72.0" } ] }
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20650.json"
vanir_signatures_modified
"2026-07-08T16:40:32Z"
vanir_signatures
[
{
"signature_version": "v1",
"source": "https://gitlab.freedesktop.org/poppler/poppler@de0c0b8324e776f0b851485e0fc9622fc35695b7",
"id": "CVE-2018-20650-4cf0bf9e",
"digest": {
"length": 812.0,
"function_hash": "249822804868323713812360103822680906390"
},
"target": {
"function": "FileSpec::FileSpec",
"file": "poppler/FileSpec.cc"
},
"deprecated": false,
"signature_type": "Function"
},
{
"signature_version": "v1",
"source": "https://gitlab.freedesktop.org/poppler/poppler@de0c0b8324e776f0b851485e0fc9622fc35695b7",
"id": "CVE-2018-20650-9594da17",
"digest": {
"threshold": 0.9,
"line_hashes": [
"293949540968280903538352693917672011553",
"80900747097883303778158019435312285310",
"21427333946226228288953424865544875497",
"111764228469009528479060060427103681018",
"336533272156547176625856577059739631806",
"55015525656138811578310982402018421318",
"292205714106596341773240197416630493705"
]
},
"target": {
"file": "poppler/FileSpec.cc"
},
"deprecated": false,
"signature_type": "Line"
}
]