CVE-2019-9545

See a problem?

Source

https://nvd.nist.gov/vuln/detail/CVE-2019-9545

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-9545.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2019-9545

Related

Published

2019-03-01T19:29:02Z

Modified

2024-08-01T09:15:12.518123Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JBIG2Bitmap::clearToZero.

References

Affected packages

Debian:11 / poppler

Package

Name: poppler
Purl: pkg:deb/debian/poppler?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

20.*

20.09.0-3.1

20.09.0-3.1+deb11u1

21.*

21.02.0-1

21.06.0-1

21.06.1-1

21.11.0-1

22.*

22.02.0-1

22.02.0-2

22.02.0-3

22.06.0-1

22.08.0-1

22.08.0-2

22.08.0-2.1

22.11.0-1

22.12.0-1

22.12.0-2

22.12.0-2.1

22.12.0-2.2

23.*

23.08.0-1

23.08.0-2

23.12.0-1

24.*

24.02.0-1

24.02.0-2

24.02.0-3

24.02.0-4

24.02.0-5

24.02.0-5+loong64

24.06.0-1

24.06.0-2

Ecosystem specific

{
    "urgency": "low"
}

Debian:12 / poppler

Package

Name: poppler
Purl: pkg:deb/debian/poppler?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

22.*

22.12.0-2

22.12.0-2.1

22.12.0-2.2

23.*

23.08.0-1

23.08.0-2

23.12.0-1

24.*

24.02.0-1

24.02.0-2

24.02.0-3

24.02.0-4

24.02.0-5

24.02.0-5+loong64

24.06.0-1

24.06.0-2

Ecosystem specific

{
    "urgency": "low"
}

Debian:13 / poppler

Package

Name: poppler
Purl: pkg:deb/debian/poppler?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

22.*

22.12.0-2

22.12.0-2.1

22.12.0-2.2

23.*

23.08.0-1

23.08.0-2

23.12.0-1

24.*

24.02.0-1

24.02.0-2

24.02.0-3

24.02.0-4

24.02.0-5

24.02.0-5+loong64

24.06.0-1

24.06.0-2

Ecosystem specific

{
    "urgency": "low"
}

Git / gitlab.freedesktop.org/poppler/poppler

Affected ranges

Type: GIT
Repo: https://gitlab.freedesktop.org/poppler/poppler
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

c0c89223c1724815e8bae78ebac72bb3a4873a68

Affected versions

poppler-0.*

poppler-0.10.0

poppler-0.11.0

poppler-0.11.1

poppler-0.11.2

poppler-0.11.3

poppler-0.12.0

poppler-0.13.1

poppler-0.13.2

poppler-0.13.3

poppler-0.13.4

poppler-0.14.0

poppler-0.15.0

poppler-0.15.1

poppler-0.15.2

poppler-0.15.3

poppler-0.16.0

poppler-0.17.0

poppler-0.17.1

poppler-0.17.2

poppler-0.17.3

poppler-0.17.4

poppler-0.18.0

poppler-0.19.0

poppler-0.19.1

poppler-0.19.2

poppler-0.19.3

poppler-0.19.4

poppler-0.2.0

poppler-0.20.0

poppler-0.20.1

poppler-0.20.2

poppler-0.20.3

poppler-0.20.4

poppler-0.20.5

poppler-0.21.0

poppler-0.21.1

poppler-0.21.2

poppler-0.21.3

poppler-0.21.4

poppler-0.22.0

poppler-0.22.1

poppler-0.22.2

poppler-0.22.3

poppler-0.22.4

poppler-0.23.0

poppler-0.23.1

poppler-0.23.2

poppler-0.23.3

poppler-0.23.4

poppler-0.24.0

poppler-0.24.1

poppler-0.24.2

poppler-0.24.3

poppler-0.24.4

poppler-0.24.5

poppler-0.25.0

poppler-0.25.1

poppler-0.25.2

poppler-0.25.3

poppler-0.26.0

poppler-0.26.1

poppler-0.26.2

poppler-0.26.3

poppler-0.26.4

poppler-0.28.0

poppler-0.28.1

poppler-0.29.0

poppler-0.3.0

poppler-0.3.1

poppler-0.3.2

poppler-0.3.3

poppler-0.30.0

poppler-0.31.0

poppler-0.32.0

poppler-0.33.0

poppler-0.34.0

poppler-0.35.0

poppler-0.36

poppler-0.37

poppler-0.38.0

poppler-0.39

poppler-0.4.0

poppler-0.40.0

poppler-0.41.0

poppler-0.42.0

poppler-0.43

poppler-0.44

poppler-0.45

poppler-0.46

poppler-0.47

poppler-0.48

poppler-0.49

poppler-0.5.0

poppler-0.5.1

poppler-0.5.2

poppler-0.5.3

poppler-0.5.4

poppler-0.50

poppler-0.51

poppler-0.52

poppler-0.53

poppler-0.54

poppler-0.55

poppler-0.56

poppler-0.57

poppler-0.58

poppler-0.59

poppler-0.6.0

poppler-0.6.0.RC1

poppler-0.60

poppler-0.60.1

poppler-0.61

poppler-0.61.1

poppler-0.62.0

poppler-0.63.0

poppler-0.64.0

poppler-0.65.0

poppler-0.66.0

poppler-0.67.0

poppler-0.68.0

poppler-0.69.0

poppler-0.7.0

poppler-0.7.1

poppler-0.7.2

poppler-0.7.3

poppler-0.70.0

poppler-0.70.1

poppler-0.71.0

poppler-0.72.0

poppler-0.73.0

poppler-0.74.0

poppler-0.8.0

poppler-0.9.0

poppler-0.9.1

poppler-0.9.2

poppler-0.9.3

Other

poppler-before-fontconfig