Freedesktop vulnerabilities
158 vulnerabilities
Known vulnerabilities in Freedesktop products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 23 products.
Products
23- Poppler96 vulnerabilities
- Dbus24 vulnerabilities
- Xdg Utils6 vulnerabilities
- Udisks5 vulnerabilities
- Libinput4 vulnerabilities
- Accountsservice3 vulnerabilities
- Gst Plugins Good3 vulnerabilities
- Dbus Glib2 vulnerabilities
- Libbsd2 vulnerabilities
- Policykit2 vulnerabilities
- Colord1 vulnerabilities
- Dbus1.01 vulnerabilities
- Freetype Demo Programs1 vulnerabilities
- Gst Plugins Bad1 vulnerabilities
- Libdbus1 vulnerabilities
- Libice1 vulnerabilities
- Polkit1 vulnerabilities
- Scratchbox21 vulnerabilities
- Spice Gtk1 vulnerabilities
- Telepathy Gabble1 vulnerabilities
- Virglrenderer1 vulnerabilities
- Xdg User Dirs1 vulnerabilities
- Dbus1.1.00 vulnerabilities
CVE-2018-21009debianpoppler+2
EPSS score1.89%
Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc.CVE-2018-16646canonicalubuntu_linux+4EPSS score2.88%
In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack.CVE-2018-13988canonicalubuntu_linux+10EPSS score3.11%
Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by pdfunite. This can result in memory corruption and denial of service. This may be exploitable when a victim opens a specially crafted PDF file.CVE-2018-19058canonicalubuntu_linux+7EPSS score1.86%
An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service because EmbFile::save2 in FileSpec.cc lacks a stream check before saving an embedded file.CVE-2018-19060canonicalubuntu_linux+3EPSS score1.74%
An issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating a filename of an embedded file before constructing a save path.CVE-2018-19059canonicalubuntu_linux+3EPSS score1.84%
An issue was discovered in Poppler 0.71.0. There is a out-of-bounds read in EmbFile::save2 in FileSpec.cc, will lead to denial of service, as demonstrated by utils/pdfdetach.cc not validating embedded files before save attempts.CVE-2018-19149canonicalubuntu_linux+4EPSS score2.44%
Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment.CVE-2018-20662canonicalubuntu_linux+19EPSS score2.26%
In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup) by crafting a PDF file in which an xref data structure is mishandled during extractPDFSubtype processing.CVE-2018-20650canonicalubuntu_linux+11EPSS score2.68%
A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lack of a check for the dict data type, as demonstrated by use of the FileSpec class (in FileSpec.cc) in pdfdetach.CVE-2018-20481canonicalubuntu_linux+4EPSS score3.42%
XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PDF document, when XRefEntry::setFlag in XRef.h is called from Parser::makeStream in Parser.cc.CVE-2018-20551canonicalubuntu_linux+3EPSS score2.02%
A reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c.CVE-2018-14036debianaccountsservice+11EPSS score3.05%
Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in user_change_icon_file_authorized_cb() in user.c.CVE-2018-17336canonicalubuntu_linux+12EPSS score0.62%
UDisks 2.8.0 has a format string vulnerability in udisks_log in udiskslogging.c, allowing attackers to obtain sensitive information (stack contents), cause a denial of service (memory corruption), or possibly have unspecified other impact via a malformed filesystem label, as demonstrated by %d or %n substrings.CVE-2018-18897canonicalubuntu_linux+11EPSS score1.96%
An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace::setDisplayProfile in GfxState.cc, as demonstrated by pdftocairo.CVE-2018-10768canonicalubuntu_linux+8EPSS score2.35%
There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5. A crafted input will lead to a remote denial of service attack. Later Ubuntu packages such as for Poppler 0.41.0 are not affected.CVE-2013-2168debiandbus+4EPSS score0.38%
The _dbus_printf_string_upper_bound function in dbus/dbus-sysdeps-unix.c in D-Bus (aka DBus) 1.4.x before 1.4.26, 1.6.x before 1.6.12, and 1.7.x before 1.7.4 allows local users to cause a denial of service (service crash) via a crafted message.CVE-2013-1788debianpoppler+1EPSS score3.87%
poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors that trigger an "invalid memory access" in (1) splash/Splash.cc, (2) poppler/Function.cc, and (3) poppler/Stream.cc.CVE-2013-1789freedesktoppopplerEPSS score2.38%
splash/Splash.cc in poppler before 0.22.1 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to the (1) Splash::arbitraryTransformMask, (2) Splash::blitMask, and (3) Splash::scaleMaskYuXu functions.CVE-2013-1790debianpoppler+1EPSS score2.58%
poppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an unspecified impact via vectors that trigger a read of uninitialized memory by the CCITTFaxStream::lookChar function.CVE-2013-0292debiandbus-glib+4EPSS score1.09%
The dbus_g_proxy_manager_filter function in dbus-gproxy in Dbus-glib before 0.100.1 does not properly verify the sender of NameOwnerChanged signals, which allows local users to gain privileges via a spoofed signal.