← All advisories

Unrated severityNVD Advisory· Published Sep 5, 2019· Updated Aug 5, 2024

CVE-2018-21009

CVE-2018-21009

Description

Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9

Poppler/Popplerdescription
Poppler (software)/Popplerllm-fuzzy
Range: <0.66.0
osv-coords7 versions
pkg:rpm/opensuse/poppler&distro=openSUSE%20Leap%2015.4 pkg:rpm/suse/poppler&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/poppler&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/poppler&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/poppler-qt&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/poppler-qt&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/poppler-qt&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5
< 0.62.0-150000.4.15.1+ 6 more
- (no CPE)range: < 0.62.0-150000.4.15.1
- (no CPE)range: < 0.43.0-16.25.1
- (no CPE)range: < 0.43.0-16.25.1
- (no CPE)range: < 0.24.4-14.26.1
- (no CPE)range: < 0.43.0-16.25.1
- (no CPE)range: < 0.43.0-16.25.1
- (no CPE)range: < 0.43.0-16.25.1

Patches

Vulnerability mechanics

References

3

gitlab.freedesktop.org/poppler/poppler/commit/0868c499a9f5f37f8df5c9fef03c37496b40fc8amitrex_refsource_MISC
lists.debian.org/debian-lts-announce/2019/09/msg00033.htmlmitremailing-listx_refsource_MLIST
lists.debian.org/debian-lts-announce/2020/07/msg00018.htmlmitremailing-listx_refsource_MLIST

News mentions

0

No linked articles in our index yet.