SUSE-SU-2018:1691-1: poppler&distro=SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2018:1691-1 is a vulnerability in poppler&distro=SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 3 · Downstream 0 · Related 3Timeline
- 14-06-2018PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for poppler This update for poppler fixes the following issues: - CVE-2017-14977: Fixed a NULL pointer dereference vulnerability in the FoFiTrueType::getCFFBlock() function in FoFiTrueType.cc that occurred due to lack of validation of a table pointer, which allows an attacker to launch a denial of service attack. (bsc#1061265) - CVE-2017-1000456: Validate boundaries in TextPool::addWord to prevent overflows in subsequent calculations (bsc#1074453) - CVE-2017-15565: Prevent NULL Pointer dereference in the GfxImageColorMap::getGrayLine() function via a crafted PDF document (bsc#1064593)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse3 products
- poppler&distro=SUSE Linux Enterprise Server 11 SP4< 0.12.3-1.13.3.2
- poppler&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4< 0.12.3-1.13.3.2
- poppler&distro=SUSE Linux Enterprise Software Development Kit 11 SP4< 0.12.3-1.13.3.2
1 vendor · 3 products