Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-3440-1
HistoryOct 06, 2017 - 12:00 a.m.

poppler vulnerabilities

2017-10-0600:00:00
ubuntu.com
38

7.3 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.0%

JSON

Releases

  • Ubuntu 17.04
  • Ubuntu 16.04 ESM
  • Ubuntu 14.04 ESM

Packages

  • poppler - PDF rendering library

Details

It was discovered that Poppler incorrectly handled certain files.
If a user or automated system were tricked into opening a
crafted PDF file, an attacker could cause a denial of service.
(CVE-2017-14518, CVE-2017-14520, CVE-2017-14617, CVE-2017-14929,
CVE-2017-14975, CVE-2017-14977)

It was discovered that Poppler incorrectly handled certain files.
If a user or automated system were tricked into opening a crafted
PDF file, an attacker could cause a denial of service. This issue
only affected Ubuntu 17.04 and 16.04. (CVE-2017-14926, CVE-2017-14928)

Alberto Garcia, Francisco Oca and Suleman Ali discovered that Poppler
incorrectly handled certain files. If a user or automated system were
tricked into opening a crafted PDF file, an attacker could cause a
denial of service. (CVE-2017-9776)

OSVersionArchitecturePackageVersionFilename
Ubuntu17.04noarchlibpoppler64< 0.48.0-2ubuntu2.3UNKNOWN
Ubuntu17.04noarchgir1.2-poppler-0.18< 0.48.0-2ubuntu2.3UNKNOWN
Ubuntu17.04noarchgir1.2-poppler-0.18-dbgsym< 0.48.0-2ubuntu2.3UNKNOWN
Ubuntu17.04noarchlibpoppler-cpp-dev< 0.48.0-2ubuntu2.3UNKNOWN
Ubuntu17.04noarchlibpoppler-cpp-dev-dbgsym< 0.48.0-2ubuntu2.3UNKNOWN
Ubuntu17.04noarchlibpoppler-cpp0v5< 0.48.0-2ubuntu2.3UNKNOWN
Ubuntu17.04noarchlibpoppler-cpp0v5-dbgsym< 0.48.0-2ubuntu2.3UNKNOWN
Ubuntu17.04noarchlibpoppler-dev< 0.48.0-2ubuntu2.3UNKNOWN
Ubuntu17.04noarchlibpoppler-dev-dbgsym< 0.48.0-2ubuntu2.3UNKNOWN
Ubuntu17.04noarchlibpoppler-glib-dev< 0.48.0-2ubuntu2.3UNKNOWN
Rows per page:
1-10 of 831

Related

nessus 49
openvas 37
mageia 4
fedora 18
suse 1
osv 6
debian 8
gentoo 1
redhatcve 9
debiancve 9
ubuntucve 13
prion 9
cvelist 9
cve 10
veracode 6
oraclelinux 2
centos 2
redhat 2
amazon 1
archlinux 1
nessus
nessus
Ubuntu 14.04 LTS / 16.04 LTS : poppler vulnerabilities (USN-3440-1)
2017-10-09 00:00:00
Fedora 26 : mingw-poppler (2017-a0ffdf1fbd)
2017-10-26 00:00:00
Fedora 25 : poppler (2017-805d9423f8)
2017-11-02 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-3440-1)
2018-10-26 00:00:00
Mageia: Security Advisory (MGASA-2017-0378)
2022-01-28 00:00:00
Huawei EulerOS: Security Advisory for poppler (EulerOS-SA-2017-1260)
2020-01-23 00:00:00
mageia
mageia
Updated poppler packages fix security vulnerabilities
2017-10-19 21:14:02
Updated poppler packages fix security vulnerabilities
2017-09-03 18:11:21
Updated poppler packages fix security vulnerabilities
2017-10-05 23:37:56
fedora
fedora
[SECURITY] Fedora 26 Update: mingw-poppler-0.52.0-5.fc26
2017-10-25 23:18:04
[SECURITY] Fedora 25 Update: poppler-0.45.0-9.fc25
2017-11-01 16:45:50
[SECURITY] Fedora 25 Update: mingw-poppler-0.45.0-5.fc25
2017-10-25 21:23:29
suse
suse
Security update for poppler (moderate)
2018-06-16 15:10:22
osv
osv
poppler - security update
2018-01-07 00:00:00
poppler - security update
2017-11-18 00:00:00
poppler - regression update
2018-04-12 00:00:00
debian
debian
[SECURITY] [DSA 4079-1] poppler security update
2018-01-07 20:52:35
[SECURITY] [DLA 1177-1] poppler security update
2017-11-18 18:28:08
[SECURITY] [DSA 4079-2] poppler regression update
2018-04-12 13:32:44
gentoo
gentoo
Poppler: Multiple vulnerabilities
2018-04-08 00:00:00
redhatcve
redhatcve
CVE-2017-14977
2017-10-10 12:49:37
CVE-2017-14926
2017-10-10 12:22:06
CVE-2017-14975
2017-10-10 12:50:06
debiancve
debiancve
CVE-2017-14975
2017-10-02 01:29:00
CVE-2017-14926
2017-09-30 01:29:00
CVE-2017-14518
2017-09-17 23:29:00
ubuntucve
ubuntucve
CVE-2017-14975
2017-10-01 00:00:00
CVE-2017-14926
2017-09-29 00:00:00
CVE-2017-14518
2017-09-17 00:00:00
prion
prion
Null pointer dereference
2017-09-30 01:29:00
Code injection
2017-09-17 23:29:00
Code injection
2017-09-17 23:29:00
cvelist
cvelist
CVE-2017-14926
2017-09-29 07:00:00
CVE-2017-14975
2017-10-01 23:00:00
CVE-2017-14518
2017-09-17 23:00:00
cve
cve
CVE-2017-14518
2017-09-17 23:29:00
CVE-2017-14977
2017-10-02 01:29:00
CVE-2017-14926
2017-09-30 01:29:00
veracode
veracode
Denial Of Service (DoS)
2018-06-08 09:27:29
Denial Of Service (DoS)
2018-06-08 11:21:44
Remote Code Execution (RCE)
2018-06-08 09:15:27
oraclelinux
oraclelinux
poppler security update
2017-08-30 00:00:00
poppler security update
2017-08-30 00:00:00
centos
centos
poppler security update
2017-08-31 18:48:46
poppler security update
2017-08-31 18:58:47
redhat
redhat
(RHSA-2017:2550) Moderate: poppler security update
2017-08-30 11:24:47
(RHSA-2017:2551) Moderate: poppler security update
2017-08-30 11:25:13
amazon
amazon
Medium: poppler
2017-09-28 22:45:00
archlinux
archlinux
[ASA-201706-33] poppler: arbitrary code execution
2017-06-26 00:00:00

7.3 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.0%

JSON
Related for USN-3440-1
nessus49openvas37mageia4fedora18suse1osv6debian8gentoo1redhatcve9debiancve9ubuntucve13prion9cvelist9cve10veracode6oraclelinux2centos2redhat2amazon1archlinux1