Division by zero in Poppler - CVE-2019-14494

Vulnerability identifier: #VU20053

CSH Severity: Low

CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-14494

CWE-ID: CWE-369

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform denial of service (DoS) attack.

The vulnerability exists due to division by zero error when processing untrusted input in the function SplashOutputDev::tilingPatternFill at SplashOutputDev.cc. A remote attacker can create a specially crafted PDF file and crash the application.

Poppler
Amazon Linux AMI
SUSE CaaS Platform
SUSE Enterprise Storage
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Desktop
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat CodeReady Linux Builder for x86_64
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Workstation Extension
Fedora
poppler (Red Hat package)
poppler (Ubuntu package)
evince (Red Hat package)
libpoppler-cpp0-debuginfo
typelib-1_0-Poppler-0_18
poppler-tools-debuginfo
poppler-tools
libpoppler-glib8-debuginfo
libpoppler-glib8
libpoppler-glib-devel
libpoppler-devel
libpoppler-cpp0
poppler-debugsource
libpoppler73-debuginfo
libpoppler73
poppler

Install update from vendor's website.

Poppler - update to 0.79.0
poppler (Red Hat package) - addressed in versions 0.26.5-43.el7, 0.66.0-27.el8
poppler (Ubuntu package) - addressed in versions 0.62.0-2ubuntu2.10, 0.74.0-0ubuntu1.3
evince (Red Hat package) - update to 3.28.2-10.el7
libpoppler-cpp0-debuginfo - update to 0.62.0-4.6.1
typelib-1_0-Poppler-0_18 - update to 0.62.0-4.6.1
poppler-tools-debuginfo - update to 0.62.0-4.6.1
poppler-tools - update to 0.62.0-4.6.1
libpoppler-glib8-debuginfo - update to 0.62.0-4.6.1
libpoppler-glib8 - update to 0.62.0-4.6.1
libpoppler-glib-devel - update to 0.62.0-4.6.1
libpoppler-devel - update to 0.62.0-4.6.1
libpoppler-cpp0 - update to 0.62.0-4.6.1
poppler-debugsource - update to 0.62.0-4.6.1
libpoppler73-debuginfo - update to 0.62.0-4.6.1
libpoppler73 - update to 0.62.0-4.6.1
poppler - addressed in versions 0.73.0-16.fc30, 0.73.0-16.fc31

• https://gitlab.freedesktop.org/poppler/poppler/issues/802
• https://gitlab.freedesktop.org/poppler/poppler/merge_requests/317

• Multiple vulnerabilities in Poppler
• Ubuntu update for poppler
• Red Hat Enterprise Linux 7 update for evince and poppler
• Red Hat Enterprise Linux 8 update for poppler
• Amazon Linux AMI update for poppler
• SUSE update for poppler
• Fedora 30 update for poppler
• Fedora 31 update for poppler