PT-2019-5843 · Poppler+5 · Poppler+5

Published

2019-07-15

·

Updated

2023-02-11

·

CVE-2019-9959

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Poppler version 0.78.0 and earlier
Description The issue is related to the JPXStream::init function, which does not check for negative values of stream length, leading to an Integer Overflow. This allows an attacker to allocate a large memory chunk on the heap with a size controlled by the attacker, as demonstrated by pdftocairo. The vulnerability can be exploited by a remote attacker to cause a denial of service.
Recommendations For Poppler version 0.78.0 and earlier, update to a version that fixes the JPXStream::init function to check for negative stream length values. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

Weakness Enumeration

Related Identifiers

BDU:2021-03400
CESA-2019_2713
CESA-2020_1074
CVE-2019-9959
DLA-1963-1
DLA-2440-1
DLA-3120-1
MGASA-2019-0276
OPENSUSE-SU-2021:3854-1
OPENSUSE-SU-2021_3854-1
RHSA-2019:2713
RHSA-2019_2713
RHSA-2020:1074
RHSA-2020_1074
SUSE-SU-2021:3854-1
SUSE-SU-2022:1723-1
SUSE-SU-2022:1724-1
SUSE-SU-2022_1723-1
SUSE-SU-2022_1724-1
USN-4646-1
USN-4646-2

Affected Products

Astra Linux
Centos
Poppler
Red Hat
Suse
Ubuntu