According to the versions of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in Poppler 0.74.0. There is a     heap-based buffer over-read in the function     PSOutputDev::checkPageSlice at     PSOutputDev.cc.(CVE-2019-10871)

  - In Poppler 0.59.0, a NULL Pointer Dereference exists in     the SplashOutputDev::type3D0() function in     SplashOutputDev.cc via a crafted PDF     document.(CVE-2017-14927)

  - PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0     mishandles dict marking, leading to stack consumption     in the function Dict::find() located at Dict.cc, which     can (for example) be triggered by passing a crafted pdf     file to the pdfunite binary.(CVE-2019-9903)

  - Poppler before 0.66.0 has an integer overflow in     Parser::makeStream in Parser.cc.(CVE-2018-21009)

  - The function GfxImageColorMap::getGray in GfxState.cc     in Poppler 0.54.0 allows remote attackers to cause a     denial of service (stack-based buffer over-read and     application crash) via a crafted PDF document, related     to missing color-map validation in     ImageOutputDev.cc.(CVE-2017-9865)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of poppler installed on the remote host is prior to 0.26.5-42.20. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1398 advisory.

    The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in     GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented(), leading to     uninitialized memory use when processing certain TIFF image files. (CVE-2019-11459)

    Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc. (CVE-2018-21009)

    The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream     length, leading to an Integer Overflow, thereby making it possible to allocate a large memory chunk on the     heap, with a size controlled by an attacker, as demonstrated by pdftocairo. (CVE-2019-9959)

    An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function     PSOutputDev::checkPageSlice at PSOutputDev.cc. (CVE-2019-10871)

    In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc     via data with inconsistent heights or widths. (CVE-2019-12293)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2907-1 advisory.

    - CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service     (bsc#1199272).
      - CVE-2018-21009: Fixed integer overflow in Parser:makeStream in Parser.cc (bsc#1149635).
      - CVE-2019-12293: Fixed heap-based buffer over-read in JPXStream:init in JPEG2000Stream.cc     (bsc#1136105).
      - CVE-2018-20481: Fixed memory leak in GfxColorSpace:setDisplayProfile in GfxState.cc (bsc#1114966).
      - CVE-2019-7310: Fixed a heap-based buffer over-read allows remote attackers to cause DOS via a special     crafted PDF (bsc#1124150).
      - CVE-2018-13988: Fixed buffer overflow in pdfunite (bsc#1102531).
      - CVE-2018-16646: Fixed infinite recursion in poppler/Parser.cc:Parser::getObj() function (bsc#1107597).
      - CVE-2018-19058: Fixed reachable abort in Object.h leading to denial of service (bsc#1115187).
      - CVE-2018-19059: Fixed out-of-bounds read in EmbFile:save2 in FileSpec.cc leading to denial of service     (bsc#1115186).
      - CVE-2018-19060: Fixed NULL pointer dereference in goo/GooString.h leading to denial of service     (bsc#1115185).
      - CVE-2018-19149: Fixed NULL pointer dereference in _poppler_attachment_new when called from     poppler_annot_file_attachment_get_attachment (bsc#1115626).
      - CVE-2017-18267: Fixed denial of service (infinite recursion) via a crafted PDF file (bsc#1092945).
      - CVE-2018-20650: Fixed issue where a reachable Object in dictLookup assertion allows attackers to cause     DOS (bsc#1120939).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2906-1 advisory.

    - CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service     (bsc#1199272).
      - CVE-2018-21009: Fixed integer overflow in Parser:makeStream in Parser.cc (bsc#1149635).
      - CVE-2018-20481: Fixed memory leak in GfxColorSpace:setDisplayProfile in GfxState.cc (bsc#1114966).
      - CVE-2019-7310: Fixed a heap-based buffer over-read allows remote attackers to cause DOS via a special     crafted PDF (bsc#1124150).
      - CVE-2018-13988: Fixed buffer overflow in pdfunite (bsc#1102531).
      - CVE-2018-16646: Fixed infinite recursion in poppler/Parser.cc:Parser::getObj() function (bsc#1107597).
      - CVE-2018-19058: Fixed reachable abort in Object.h leading to denial of service (bsc#1115187).
      - CVE-2018-19059: Fixed out-of-bounds read in EmbFile:save2 in FileSpec.cc leading to denial of service     (bsc#1115186).
      - CVE-2018-19060: Fixed NULL pointer dereference in goo/GooString.h leading to denial of service     (bsc#1115185).
      - CVE-2018-19149: Fixed NULL pointer dereference in _poppler_attachment_new when called from     poppler_annot_file_attachment_get_attachment (bsc#1115626).
      - CVE-2017-18267: Fixed denial of service (infinite recursion) via a crafted PDF file (bsc#1092945).
      - CVE-2018-20650: Fixed issue where a reachable Object in dictLookup assertion allows attackers to cause     DOS (bsc#1120939).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1074 advisory.

    evince     [3.28.2-9]
    - Handle failure from TIFFReadRGBAImageOriented
    - Resolves: #1717352

    poppler     [0.26.5-42]
    - Fix potential integer overflow and check length for negative values
    - Resolves: #1757283

    [0.26.5-41]
    - Ignore dict Length if it is broken
    - Resolves: #1733026

    [0.26.5-40]
    - Fail gracefully if not all components of JPEG2000Stream
    - have the same size
    - Resolves: #1723504

    [0.26.5-39]
    - Check whether input is RGB in PSOutputDev::checkPageSlice()
    - Resolves: #1697575

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc. (CVE-2018-21009)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has poppler packages installed that are affected by multiple vulnerabilities:

  - An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function     PSOutputDev::checkPageSlice at PSOutputDev.cc. (CVE-2019-10871)

  - The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream     length, leading to an Integer Overflow, thereby making it possible to allocate a large memory chunk on the     heap, with a size controlled by an attacker, as demonstrated by pdftocairo. (CVE-2019-9959)

  - In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc     via data with inconsistent heights or widths. (CVE-2019-12293)

  - Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc. (CVE-2018-21009)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-4565:01 advisory.

    * poppler: integer overflow in Parser::makeStream in Parser.cc (CVE-2018-21009)
      * poppler: heap-based buffer over-read in function PSOutputDev::checkPageSlice in PSOutputDev.cc     (CVE-2019-10871)
      * poppler: heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc (CVE-2019-12293)
      * poppler: integer overflow in JPXStream::init function leading to memory consumption (CVE-2019-9959)
      * evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail()     (CVE-2019-11459)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has poppler packages installed that are affected by multiple vulnerabilities:

  - An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function     PSOutputDev::checkPageSlice at PSOutputDev.cc. (CVE-2019-10871)

  - The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream     length, leading to an Integer Overflow, thereby making it possible to allocate a large memory chunk on the     heap, with a size controlled by an attacker, as demonstrated by pdftocairo. (CVE-2019-9959)

  - In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc     via data with inconsistent heights or widths. (CVE-2019-12293)

  - Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc. (CVE-2018-21009)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
149139	EulerOS 2.0 SP3 : poppler (EulerOS-SA-2021-1832)	Nessus	Huawei Local Security Checks	4/30/2021	1/3/2024	high
138640	Amazon Linux AMI : poppler (ALAS-2020-1398)	Nessus	Amazon Linux Local Security Checks	7/20/2020	12/11/2024	high
178693	SUSE SLES12: libpoppler-cpp0 / libpoppler-devel / libpoppler-glib-devel / etc (SUSE-SU-2023:2907-1)	Nessus	SuSE Local Security Checks	7/21/2023	6/25/2026	high
178695	SUSE SLES12 Security Update : poppler (SUSE-SU-2023:2906-1)	Nessus	SuSE Local Security Checks	7/21/2023	6/25/2026	high
180705	Oracle Linux 7 : poppler / and / evince (ELSA-2020-1074)	Nessus	Oracle Linux Local Security Checks	9/7/2023	11/1/2024	high
222128	Linux Distros Unpatched Vulnerability : CVE-2018-21009	Nessus	Misc.	3/4/2025	7/31/2026	high
143995	NewStart CGSL CORE 5.05 / MAIN 5.05 : poppler Multiple Vulnerabilities (NS-SA-2020-0110)	Nessus	NewStart CGSL Local Security Checks	12/9/2020	2/2/2024	high
291657	MiracleLinux 7 : evince-3.28.2-9.el7poppler-0.26.5-42.el7 (AXSA:2020-4565:01)	Nessus	Miracle Linux Local Security Checks	1/19/2026	1/19/2026	high
143911	NewStart CGSL CORE 5.04 / MAIN 5.04 : poppler Multiple Vulnerabilities (NS-SA-2020-0074)	Nessus	NewStart CGSL Local Security Checks	12/9/2020	2/5/2024	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high