An issue was discovered in Poppler 22.07.0. There is a reachable abort
which leads to denial of service because the main function in pdfunite.cc
lacks a stream check before saving an embedded file.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 18.04 | noarch | poppler | < 0.62.0-2ubuntu2.14+esm2) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
ubuntu | 20.04 | noarch | poppler | < 0.86.1-0ubuntu1.4 | UNKNOWN |
ubuntu | 22.04 | noarch | poppler | < 22.02.0-2ubuntu0.3 | UNKNOWN |
ubuntu | 16.04 | noarch | poppler | < 0.41.0-0ubuntu1.16+esm4) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |