CVE-2018-19059
gir1.2-poppler-0.18: An issue was discovered in Poppler 0.71.0
CVE-2018-19059 is fixed in 6 products on 1 platform, first by gir1.2-poppler-0.18 0.62.0-2ubuntu2.4, released November 6, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0184
79th percentile
An issue was discovered in Poppler 0.71.0. There is a out-of-bounds read in EmbFile::save2 in FileSpec.cc, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating embedded files before save attempts.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| gir1.2-poppler-0.18 · Ubuntu 18.04.6 LTS (bionic) | 0.62.0-2ubuntu2.4 | gir1.2-poppler-0.18 0.62.0-2ubuntu2.4 | Nov 6, 2018 |
| libpoppler-cpp0v5 · Ubuntu 18.04.6 LTS (bionic) | 0.62.0-2ubuntu2.4 | libpoppler-cpp0v5 0.62.0-2ubuntu2.4 | Nov 6, 2018 |
| libpoppler-glib8 · Ubuntu 18.04.6 LTS (bionic) | 0.62.0-2ubuntu2.4 | libpoppler-glib8 0.62.0-2ubuntu2.4 | Nov 6, 2018 |
| libpoppler-qt5-1 · Ubuntu 18.04.6 LTS (bionic) | 0.62.0-2ubuntu2.4 | libpoppler-qt5-1 0.62.0-2ubuntu2.4 | Nov 6, 2018 |
| libpoppler73 · Ubuntu 18.04.6 LTS (bionic) | 0.62.0-2ubuntu2.4 | libpoppler73 0.62.0-2ubuntu2.4 | Nov 6, 2018 |
| poppler-utils · Ubuntu 18.04.6 LTS (bionic) | 0.62.0-2ubuntu2.4 | poppler-utils 0.62.0-2ubuntu2.4 | Nov 6, 2018 |