Stack-based buffer overflow in xpdf - CVE-2019-16115

Vulnerability identifier: #VU79509

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-16115

CWE-ID: CWE-121

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing PDF files within the IdentityFunction::transform() function in Function.cc. A remote unauthenticated attacker can pass a specially crafted PDF file the the affected application, trigger a stack-based buffer overflow and execute arbitrary code on the target system.

xpdf
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Software Development Kit 12
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Retail Branch Server
Basesystem Module
openSUSE Leap
libpoppler44
libpoppler44-debuginfo
libpoppler-cpp0-debuginfo
libpoppler-qt4-devel
poppler-debugsource
typelib-1_0-Poppler-0_18
libpoppler-devel
libpoppler-glib-devel
libpoppler-cpp0
libpoppler-qt4-4
libpoppler60-debuginfo
libpoppler60
poppler-tools-debuginfo
poppler-tools
libpoppler-glib8-debuginfo
libpoppler-glib8
libpoppler-qt4-4-debuginfo
libpoppler73
libpoppler73-debuginfo
libpoppler73-32bit-debuginfo
libpoppler73-32bit
libpoppler89
libpoppler89-32bit-debuginfo
libpoppler89-debuginfo
libpoppler89-32bit

Install updates from vendor's website.

xpdf - update to 4.0.2
libpoppler44 - update to 0.24.4-14.29.1
libpoppler44-debuginfo - update to 0.24.4-14.29.1
libpoppler-cpp0-debuginfo - addressed in versions 0.43.0-16.28.1, 0.79.0-150200.3.14.1
libpoppler-qt4-devel - update to 0.43.0-16.28.1
poppler-debugsource - addressed in versions 0.43.0-16.28.1, 0.79.0-150200.3.14.1
typelib-1_0-Poppler-0_18 - addressed in versions 0.43.0-16.28.1, 0.79.0-150200.3.14.1
libpoppler-devel - addressed in versions 0.43.0-16.28.1, 0.79.0-150200.3.14.1
libpoppler-glib-devel - addressed in versions 0.43.0-16.28.1, 0.79.0-150200.3.14.1
libpoppler-cpp0 - addressed in versions 0.43.0-16.28.1, 0.79.0-150200.3.14.1
libpoppler-qt4-4 - update to 0.43.0-16.28.1
libpoppler60-debuginfo - update to 0.43.0-16.28.1
libpoppler60 - update to 0.43.0-16.28.1
poppler-tools-debuginfo - addressed in versions 0.43.0-16.28.1, 0.79.0-150200.3.14.1
poppler-tools - addressed in versions 0.43.0-16.28.1, 0.79.0-150200.3.14.1
libpoppler-glib8-debuginfo - addressed in versions 0.43.0-16.28.1, 0.79.0-150200.3.14.1
libpoppler-glib8 - addressed in versions 0.43.0-16.28.1, 0.79.0-150200.3.14.1
libpoppler-qt4-4-debuginfo - update to 0.43.0-16.28.1
libpoppler73 - update to 0.62.0-150000.4.18.1
libpoppler73-debuginfo - update to 0.62.0-150000.4.18.1
libpoppler73-32bit-debuginfo - update to 0.62.0-150000.4.18.1
libpoppler73-32bit - update to 0.62.0-150000.4.18.1
libpoppler89 - update to 0.79.0-150200.3.14.1
libpoppler89-32bit-debuginfo - update to 0.79.0-150200.3.14.1
libpoppler89-debuginfo - update to 0.79.0-150200.3.14.1
libpoppler89-32bit - update to 0.79.0-150200.3.14.1

• https://forum.xpdfreader.com/viewtopic.php?f=3&t=41872

• Remote code execution in Xpdf
• SUSE update for poppler
• SUSE update for poppler
• SUSE update for poppler
• SUSE update for poppler