Skip to contentFreedesktop vulnerabilities
Newest
- freedesktop popplerIn Poppler 0.59.0, memory corruption occurs in a call to Object::streamGetChar in Object.h after...CVE-2017-14519Fix available7.5 High
- freedesktop popplerIn Poppler 0.59.0, a floating point exception exists in the isImageInterpolationRequired()...CVE-2017-14518Fix available7.8 High
- freedesktop popplerAn exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler...CVE-2017-2818Fix available7.5 High
- freedesktop popplerAn exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler...CVE-2017-28147.5 High
- freedesktop libice, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreIt was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local...CVE-2017-2626Fix available5.2 Medium
- freedesktop popplerAn exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing functionality...CVE-2017-2820Fix available8.8 High
- freedesktop poppler, debian linux +1 moreThe function GfxImageColorMap::getGray in GfxState.cc in Poppler 0.54.0 allows remote attackers...CVE-2017-9865Fix available5.5 Medium
- freedesktop poppler, debian linux, redhat enterprise linux desktop +5 more +7 moreInteger overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler...CVE-2017-9776Fix available7.8 High
- freedesktop poppler, debian linux, redhat enterprise linux desktop +5 more +7 moreStack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers...CVE-2017-9775Fix available6.5 Medium
- freedesktop popplerpoppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting...CVE-2017-7515Fix available5.5 Medium
- freedesktop poppler, debian linux +1 moreIn Poppler 0.54.0, a memory leak vulnerability was found in the function Object::initArray in...CVE-2017-9408Fix available6.5 Medium
- freedesktop poppler, debian linux +1 moreIn Poppler 0.54.0, a memory leak vulnerability was found in the function gmalloc in gmem.cc,...CVE-2017-9406Fix available6.5 Medium
- freedesktop popplerpoppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite...CVE-2017-7511Fix available5.5 Medium
- freedesktop popplerpoppler 0.54.0, as used in Evince and other products, has a NULL pointer dereference in the...CVE-2017-9083Fix available6.5 Medium
- freedesktop virglrendererInteger overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before...CVE-2017-6355Fix available5.5 Medium
- freedesktop polkit, redhat enterprise linux +1 morepkexec, when used with --user nonpriv, allows local users to escape to the parent session via a...CVE-2016-2568Fix available7.8 High
- freedesktop libbsd, canonical ubuntu linux, debian linux +1 more +3 moreOff-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have...CVE-2016-2090Fix available9.8 Critical
- freedesktop poppler, canonical ubuntu linux, debian linux +1 more +3 moreHeap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler...CVE-2015-8868Fix available7.8 High
- freedesktop xdg-utils, debian linux +1 moreThe open_generic_xdg_mime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash,...CVE-2015-1877Fix available8.8 High
- freedesktop dbus, opensuse +1 moreD-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not...CVE-2015-0245Fix available1.9 Low
- canonical ubuntu linux, debian linux, freedesktop dbus +1 more +3 moreD-Bus 1.3.0 through 1.6.x before 1.6.26, 1.8.x before 1.8.10, and 1.9.x before 1.9.2 allows local...CVE-2014-7824Fix available2.1 Low
- d-bus project d-bus, freedesktop dbus, opensuse +2 moreThe dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old...CVE-2014-3639Fix available2.1 Low
- d-bus project d-bus, freedesktop dbus, opensuse +2 moreThe bus_connections_check_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x...CVE-2014-3638Fix available2.1 Low
- freedesktop dbus, opensuse +1 moreD-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close...CVE-2014-3637Fix available2.1 Low
- d-bus project d-bus, freedesktop dbus, opensuse +2 moreD-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a...CVE-2014-3636Fix available1.9 Low
- d-bus project d-bus, freedesktop dbus, opensuse +2 moreOff-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running...CVE-2014-3635Fix available4.4 Medium
- freedesktop popplerDCTStream.cc in Poppler before 0.13.3 allows remote attackers to cause a denial of service (crash...CVE-2010-5110Fix available4.3 Medium
- freedesktop dbus, debian linux, mageia project mageia +1 more +3 moredbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service ...CVE-2014-3533Fix available2.1 Low
- debian linux, freedesktop dbus, mageia +2 more +4 moredbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later,...CVE-2014-3532Fix available2.1 Low
- d-bus project d-bus, freedesktop dbus +1 moreThe dbus-daemon in D-Bus 1.2.x through 1.4.x, 1.6.x before 1.6.20, and 1.8.x before 1.8.4, sends...CVE-2014-3477Fix available2.1 Low
- freedesktop popplerThe openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on...CVE-2013-44723.3 Low
- freedesktop udisks, canonical ubuntu linux +1 moreStack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local users to...CVE-2014-0004Fix available6.9 Medium
- freedesktop popplerThe JBIG2Stream::readSegments method in JBIG2Stream.cc in Poppler before 0.24.5 does not use the...CVE-2013-72965.0 Medium
- freedesktop poppler, canonical ubuntu linux +1 moreFormat string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler...CVE-2013-4474Public exploitFix availableEPSS 10.5%5.0 Medium
- freedesktop poppler, canonical ubuntu linux +1 moreStack-based buffer overflow in the extractPages function in utils/pdfseparate.cc in poppler...CVE-2013-4473Fix available7.5 High
- freedesktop poppler, opensuse, redhat enterprise linux +1 more +3 moreThe error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute...CVE-2012-2142Fix available7.8 High
- freedesktop dbus, opensuse +1 moreThe _dbus_printf_string_upper_bound function in dbus/dbus-sysdeps-unix.c in D-Bus (aka DBus) 1.4...CVE-2013-2168Fix available1.9 Low
- freedesktop popplerpoppler/Stream.cc in poppler before 0.22.1 allows context-dependent attackers to have an...CVE-2013-1790Fix available6.8 Medium
- freedesktop popplersplash/Splash.cc in poppler before 0.22.1 allows context-dependent attackers to cause a denial of...CVE-2013-17894.3 Medium
- freedesktop popplerpoppler before 0.22.1 allows context-dependent attackers to cause a denial of service (crash) and...CVE-2013-1788Fix available6.8 Medium
- freedesktop dbus-glibThe dbus_g_proxy_manager_filter function in dbus-gproxy in Dbus-glib before 0.100.1 does not...CVE-2013-0292Public exploitFix available7.2 High
- freedesktop spice-gtk, gtk libgio +1 morelibgio, when used in setuid or other privileged programs in spice-gtk and possibly other products...CVE-2012-4425Public exploitFix available6.9 Medium
- freedesktop libdbuslibdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly...CVE-2012-3524Public exploitFix available6.9 Medium
- freedesktop colordMultiple SQL injection vulnerabilities in (1) cd-mapping-db.c and (2) cd-device-db.c in colord...CVE-2011-4349Fix available4.6 Medium
- freedesktop dbusThe configure script in D-Bus (aka DBus) 1.2.x before 1.2.28 allows local users to overwrite...CVE-2011-2533Fix available3.3 Low
- d-bus project d-bus, freedesktop dbus +1 moreThe _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2...CVE-2011-2200Fix available4.6 Medium
- freedesktop telepathy gabblejingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8...CVE-2011-1000Fix available6.4 Medium
- apple cups, freedesktop poppler, xpdfreader xpdf +8 more +10 moreThe Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly...CVE-2010-3702Fix available7.5 High
- freedesktop dbus-glibDBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local...CVE-2010-1172Fix available3.6 Low
- freedesktop udisksprobers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKS_DM_TARGETS_PARAMS information to...CVE-2010-11492.1 Low
- Show moreLoading…