Access of Uninitialized Pointer in Poppler - CVE-2020-27778

Vulnerability identifier: #VU82603

CSH Severity: Low

CVSS v4: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-27778

CWE-ID: CWE-824

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to crash the application.

The vulnerability exists due to a boundary error when converting PDF files to HTML. A remote attacker can trick the victim to convert a specially crafted file and perform a denial of service (DoS) attack.

Poppler
SUSE CaaS Platform
SUSE Enterprise Storage
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat Enterprise Linux for x86_64
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Workstation Extension
Ubuntu
openEuler
libpoppler58 (Ubuntu package)
poppler-utils (Ubuntu package)
libpoppler73 (Ubuntu package)
libpoppler73
typelib-1_0-Poppler-0_18
poppler-tools-debuginfo
poppler-tools
libpoppler-glib8-debuginfo
libpoppler-glib8
libpoppler-glib-devel
libpoppler-devel
libpoppler-cpp0-debuginfo
libpoppler-cpp0
poppler-debugsource
libpoppler73-debuginfo
poppler
poppler-glib-doc
poppler-help
poppler-cpp
poppler-qt-devel
poppler-debuginfo
poppler-glib
poppler-devel
poppler-cpp-devel
poppler-qt5-devel
poppler-glib-devel
poppler-qt
poppler-qt5
evince (Red Hat package)
poppler (Red Hat package)

Install updates from vendor's website.

Poppler - update to 0.76.0
libpoppler58 (Ubuntu package) - update to 0.41.0-0ubuntu1.15
poppler-utils (Ubuntu package) - addressed in versions 0.41.0-0ubuntu1.15, 0.62.0-2ubuntu2.11
libpoppler73 (Ubuntu package) - update to 0.62.0-2ubuntu2.11
libpoppler73 - update to 0.62.0-4.6.1
typelib-1_0-Poppler-0_18 - update to 0.62.0-4.6.1
poppler-tools-debuginfo - update to 0.62.0-4.6.1
poppler-tools - update to 0.62.0-4.6.1
libpoppler-glib8-debuginfo - update to 0.62.0-4.6.1
libpoppler-glib8 - update to 0.62.0-4.6.1
libpoppler-glib-devel - update to 0.62.0-4.6.1
libpoppler-devel - update to 0.62.0-4.6.1
libpoppler-cpp0-debuginfo - update to 0.62.0-4.6.1
libpoppler-cpp0 - update to 0.62.0-4.6.1
poppler-debugsource - update to 0.62.0-4.6.1
libpoppler73-debuginfo - update to 0.62.0-4.6.1
poppler - update to 0.67.0-7
poppler-glib-doc - update to 0.67.0-7
poppler-help - update to 0.67.0-7
poppler-cpp - update to 0.67.0-7
poppler-qt-devel - update to 0.67.0-7
poppler-debuginfo - update to 0.67.0-7
poppler-glib - update to 0.67.0-7
poppler-devel - update to 0.67.0-7
poppler-cpp-devel - update to 0.67.0-7
poppler-qt5-devel - update to 0.67.0-7
poppler-debugsource - update to 0.67.0-7
poppler-glib-devel - update to 0.67.0-7
poppler-qt - update to 0.67.0-7
poppler-qt5 - update to 0.67.0-7
evince (Red Hat package) - update to 3.28.4-11.el8
poppler (Red Hat package) - update to 20.11.0-2.el8

• https://bugzilla.redhat.com/show_bug.cgi?id=1900712
• https://lists.debian.org/debian-lts-announce/2022/09/msg00030.html

• Multiple vulnerabilities in Poppler
• openEuler update for poppler
• Red Hat Enterprise Linux 8 update for poppler and evince
• SUSE update for poppler
• Ubuntu update for poppler