SUSE-SU-2017:1998-1: poppler&distro=SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2017:1998-1 is a vulnerability in poppler&distro=SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 3 · Downstream 0 · Related 3Timeline
- 28-07-2017PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for poppler This update for poppler fixes the following issues: Security issues fixed: - CVE-2017-9775: Fix a stack overflow bug in pdftocairo that could have been exploited in a denial of service attack through a specially crafted PDF document. (bsc#1045719) - CVE-2017-9776: Fix an integer overflow bug that could have been exploited in a denial of service attack through a specially crafted PDF document. (bsc#1045721) - CVE-2017-9408: Fix a memory leak that occurred when the parser tried to recover from a broken input file. (bsc#1042802)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse5 products
- poppler&distro=SUSE Linux Enterprise Desktop 12 SP2< 0.24.4-14.6.1
- poppler&distro=SUSE Linux Enterprise Server 12 SP2< 0.24.4-14.6.1
- poppler&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2< 0.24.4-14.6.1
- poppler&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2< 0.24.4-14.6.1
- poppler&distro=SUSE Linux Enterprise Software Development Kit 12 SP3< 0.24.4-14.6.1
1 vendor · 5 products