Reachable Assertion in Poppler - CVE-2018-20551
Published: January 7, 2019 / Updated: February 1, 2023
Vulnerability identifier: #VU16831
CSH Severity: Low
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-20551
CWE-ID: CWE-617
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to reachable Object::getString assertion due to construction of invalid rich media annotation assets in the AnnotRichMedia class in Annot.c. A remote attacker can cause a denial of service.
Affected software
Poppler
poppler (Ubuntu package)
libpoppler-devel
typelib-1_0-Poppler-0_18
poppler-tools-debuginfo
poppler-tools
libpoppler-glib8-debuginfo
libpoppler-glib8
libpoppler-glib-devel
libpoppler-cpp0-debuginfo
libpoppler-cpp0
poppler-debugsource
libpoppler73-debuginfo
libpoppler73
poppler
mingw-poppler
SUSE CaaS Platform
SUSE Enterprise Storage
Red Hat Enterprise Linux for x86_64
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Workstation Extension
Fedora
poppler (Ubuntu package)
libpoppler-devel
typelib-1_0-Poppler-0_18
poppler-tools-debuginfo
poppler-tools
libpoppler-glib8-debuginfo
libpoppler-glib8
libpoppler-glib-devel
libpoppler-cpp0-debuginfo
libpoppler-cpp0
poppler-debugsource
libpoppler73-debuginfo
libpoppler73
poppler
mingw-poppler
SUSE CaaS Platform
SUSE Enterprise Storage
Red Hat Enterprise Linux for x86_64
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Workstation Extension
Fedora
How to mitigate CVE-2018-20551
Install update from vendor's website.
poppler (Ubuntu package) - addressed in versions 0.24.5-2ubuntu4.16, 0.41.0-0ubuntu1.12, 0.62.0-2ubuntu2.7, 0.68.0-0ubuntu1.5
libpoppler-devel - update to 0.62.0-4.6.1
typelib-1_0-Poppler-0_18 - update to 0.62.0-4.6.1
poppler-tools-debuginfo - update to 0.62.0-4.6.1
poppler-tools - update to 0.62.0-4.6.1
libpoppler-glib8-debuginfo - update to 0.62.0-4.6.1
libpoppler-glib8 - update to 0.62.0-4.6.1
libpoppler-glib-devel - update to 0.62.0-4.6.1
libpoppler-cpp0-debuginfo - update to 0.62.0-4.6.1
libpoppler-cpp0 - update to 0.62.0-4.6.1
poppler-debugsource - update to 0.62.0-4.6.1
libpoppler73-debuginfo - update to 0.62.0-4.6.1
libpoppler73 - update to 0.62.0-4.6.1
poppler - addressed in versions 0.62.0-14.fc28, 0.67.0-10.fc29
mingw-poppler - update to 0.67.0-3.fc29
libpoppler-devel - update to 0.62.0-4.6.1
typelib-1_0-Poppler-0_18 - update to 0.62.0-4.6.1
poppler-tools-debuginfo - update to 0.62.0-4.6.1
poppler-tools - update to 0.62.0-4.6.1
libpoppler-glib8-debuginfo - update to 0.62.0-4.6.1
libpoppler-glib8 - update to 0.62.0-4.6.1
libpoppler-glib-devel - update to 0.62.0-4.6.1
libpoppler-cpp0-debuginfo - update to 0.62.0-4.6.1
libpoppler-cpp0 - update to 0.62.0-4.6.1
poppler-debugsource - update to 0.62.0-4.6.1
libpoppler73-debuginfo - update to 0.62.0-4.6.1
libpoppler73 - update to 0.62.0-4.6.1
poppler - addressed in versions 0.62.0-14.fc28, 0.67.0-10.fc29
mingw-poppler - update to 0.67.0-3.fc29