SUSE-SU-2020:1626-1: poppler&distro=SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2020:1626-1 is a vulnerability in poppler&distro=SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 5 · Downstream 0 · Related 5Timeline
- 16-06-2020PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for poppler This update for poppler fixes the following issues: These security issues were fixed: - CVE-2017-14617: Fixed a floating point exception in Stream.cc, which may lead to a potential attack when handling malicious PDF files. (bsc#1060220) - CVE-2017-1000456: Validate boundaries in TextPool::addWord to prevent overflows in subsequent calculations (bsc#1074453) - CVE-2017-15565: Prevent NULL Pointer dereference in the GfxImageColorMap::getGrayLine() function via a crafted PDF document (bsc#1064593) - CVE-2018-10768: Prevent NULL pointer dereference in the AnnotPath::getCoordsLength function. A crafted input could have lead to a remote denial of service attack (bsc#1092105). This update also fixes an additional segmentation fault that is trigger by the reproducer for CVE-2017-14517 (bsc#1059066).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse2 products
- poppler&distro=SUSE Linux Enterprise Software Development Kit 12 SP4< 0.24.4-14.16.6
- poppler&distro=SUSE Linux Enterprise Software Development Kit 12 SP5< 0.24.4-14.16.6
1 vendor · 2 products