CVE-2018-20650

🗓️ 01 Jan 2019 16:00:29Reported by GoogleType

osv🔗 osv.dev👁 9 Views

A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lack of a check for the dict data type, as demonstrated by use of the FileSpec class (in FileSpec.cc) in pdfdetac

Reporter	Title	Published	Views	Family All 75
Cvelist	CVE-2018-20650	1 Jan 201916:00	–	cvelist
Debian CVE	CVE-2018-20650	1 Jan 201916:29	–	debiancve
Veracode	Denial Of Service (DoS)	8 Jan 201902:08	–	veracode
Prion	Design/Logic Flaw	1 Jan 201916:29	–	prion
NVD	CVE-2018-20650	1 Jan 201916:29	–	nvd
CVE	CVE-2018-20650	1 Jan 201916:29	–	cve
UbuntuCve	CVE-2018-20650	1 Jan 201900:00	–	ubuntucve
RedhatCVE	CVE-2018-20650	10 Jan 201920:20	–	redhatcve
Ubuntu	poppler vulnerabilities	22 Jan 201900:00	–	ubuntu
OpenVAS	Ubuntu: Security Advisory (USN-3865-1)	23 Jan 201900:00	–	openvas

Source	Link
securityfocus	www.securityfocus.com/bid/106459
access	www.access.redhat.com/errata/RHSA-2019:2022
access	www.access.redhat.com/errata/RHSA-2019:2713
lists	www.lists.debian.org/debian-lts-announce/2019/09/msg00033.html
lists	www.lists.debian.org/debian-lts-announce/2020/11/msg00014.html
lists	www.lists.debian.org/debian-lts-announce/2022/09/msg00030.html
gitlab	www.gitlab.freedesktop.org/poppler/poppler/commit/de0c0b8324e776f0b851485e0fc9622fc35695b7
gitlab	www.gitlab.freedesktop.org/poppler/poppler/issues/704
usn	www.usn.ubuntu.com/3865-1/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Jan 2019 16:29Current

6.5Medium risk

Vulners AI Score6.5

EPSS0.009