Lucene search

CVE-2018-20650

🗓️ 01 Jan 2019 00:00:00Reported by ubuntu.comType

A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lack of a check for the dict data type in pdfdetach

Reporter	Title	Published	Views	Family All 75
Cvelist	CVE-2018-20650	1 Jan 201916:00	–	cvelist
Debian CVE	CVE-2018-20650	1 Jan 201916:29	–	debiancve
OSV	CVE-2018-20650	1 Jan 201916:29	–	osv
OSV	poppler - security update	30 Sep 201900:00	–	osv
OSV	poppler - security update	26 Sep 202200:00	–	osv
OSV	poppler - security update	8 Nov 202000:00	–	osv
OSV	Red Hat Security Advisory: poppler security update	16 Sep 202402:32	–	osv
OSV	Red Hat Security Advisory: poppler security, bug fix, and enhancement update	16 Sep 202401:51	–	osv
CVE	CVE-2018-20650	1 Jan 201916:29	–	cve
Veracode	Denial Of Service (DoS)	8 Jan 201902:08	–	veracode

Source	Link
gitlab	www.gitlab.freedesktop.org/poppler/poppler/issues/704
ubuntu	www.ubuntu.com/security/notices/USN-3865-1
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-20650
launchpad	www.launchpad.net/bugs/cve/CVE-2018-20650
security-tracker	www.security-tracker.debian.org/tracker/CVE-2018-20650

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	18.04	noarch	poppler	0.62.0-2ubuntu2.6	UNKNOWN
ubuntu	18.10	noarch	poppler	0.68.0-0ubuntu1.4	UNKNOWN
ubuntu	14.04	noarch	poppler	0.24.5-2ubuntu4.15	UNKNOWN
ubuntu	16.04	noarch	poppler	0.41.0-0ubuntu1.11	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Jan 2019 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS24.3

CVSS36.5

EPSS0.009