Skip to contentFreedesktop vulnerabilities
Newest
- freedesktop accountsserviceaccountsservice .pam_environment infinite loopCVE-2020-16127Fix available2.8 Low
- freedesktop accountsserviceaccountsservice drops ruid, allows unprivileged users to send it signalsCVE-2020-16126Public exploitFix available3.3 Low
- freedesktop dbus, canonical ubuntu linux +1 moreCVE-2020-12049 does not affect BellSoft softwareCVE-2020-12049Fix available5.5 Medium
- freedesktop libbsd, canonical ubuntu linux, debian linux +4 more +6 morenlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name...CVE-2019-20367Fix available9.1 Critical
- freedesktop poppler, debian linux +1 morepoppler before 0.16.3 has malformed commands that may cause corruption of the internal stack.CVE-2010-4654Fix available7.8 High
- freedesktop poppler, debian linux +1 moreAn integer overflow condition in poppler before 0.16.3 can occur when parsing CharCodes for fonts.CVE-2010-4653Fix available6.5 Medium
- freedesktop popplerPoppler before 0.76.0 has an integer overflow in Parser::makeStream in Parser.cc.CVE-2018-21009Fix available8.8 High
- freedesktop poppler, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the...CVE-2019-14494Fix available7.5 High
- freedesktop poppler, debian linux, fedoraproject fedora +4 more +6 moreThe JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of...CVE-2019-9959Fix available6.5 Medium
- freedesktop dbus, canonical ubuntu linux +1 moredbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in...CVE-2019-12749Fix available7.1 High
- freedesktop popplerIn Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in...CVE-2019-12293Fix available8.8 High
- freedesktop poppler, fedoraproject fedora +1 moreFontInfoScanner::scanFonts in FontInfo.cc in Poppler 0.75.0 has infinite recursion, leading to a...CVE-2019-11026Fix available6.5 Medium
- freedesktop popplerAn issue was discovered in Poppler 0.74.0. There is a NULL pointer dereference in the function...CVE-2019-10873Fix available6.5 Medium
- freedesktop popplerAn issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function...CVE-2019-10871Fix available6.5 Medium
- freedesktop popplerAn issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function...CVE-2019-10872Fix available8.8 High
- freedesktop poppler, canonical ubuntu linux, debian linux +5 more +7 morePDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack...CVE-2019-9903Fix available6.5 Medium
- freedesktop poppler, debian linux, fedoraproject fedora +2 morePoppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc...CVE-2019-9631Fix available9.8 Critical
- freedesktop popplerAn issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream:...CVE-2019-95458.8 High
- freedesktop popplerAn issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream:...CVE-2019-95438.8 High
- freedesktop poppler, canonical ubuntu linux, debian linux +2 moreA heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0...CVE-2019-9200Fix available8.8 High
- freedesktop poppler, canonical ubuntu linux, debian linux +8 more +10 moreIn Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef:...CVE-2019-7310Fix available7.8 High
- freedesktop poppler, canonical ubuntu linux, debian linux +8 more +10 moreIn Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service ...CVE-2018-20662Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +7 more +9 moreA reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of...CVE-2018-20650Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux +1 moreA reachable Object::getString assertion in Poppler 0.72.0 allows attackers to cause a denial of...CVE-2018-20551Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +2 moreXRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows...CVE-2018-20481Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux +1 morePoppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from...CVE-2018-19149Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux +1 moreAn issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h...CVE-2018-19060Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux +1 moreAn issue was discovered in Poppler 0.71.0. There is a out-of-bounds read in EmbFile::save2 in...CVE-2018-19059Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to...CVE-2018-19058Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +7 more +9 moreAn issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace:...CVE-2018-18897Fix available6.5 Medium
- freedesktop udisks, canonical ubuntu linux +1 moreUDisks 2.8.0 has a format string vulnerability in udisks_log in udiskslogging.c, allowing...CVE-2018-17336Fix available7.8 High
- freedesktop poppler, canonical ubuntu linux, debian linux +2 moreIn Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a...CVE-2018-16646Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +5 more +7 morePoppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory...CVE-2018-13988Fix available6.5 Medium
- freedesktop accountsserviceDirectory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an...CVE-2018-14036Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +4 more +6 moreThe FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote...CVE-2017-18267Fix available5.5 Medium
- freedesktop xdg-utils, canonical ubuntu linux, debian linux +2 moreThe open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before...CVE-2017-18266Fix available8.8 High
- freedesktop poppler, canonical ubuntu linux, debian linux +4 more +6 moreThere is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an...CVE-2018-10768Fix available6.5 Medium
- freedesktop xdg-user-dirs, redhat enterprise linux, red hat, inc. rhel shipped xdg-user-dirs and gnome-session +2 moreIt was found that system umask policy is not being honored when creating XDG user directories,...CVE-2017-15131Fix available7.8 High
- freedesktop poppler, debian linux +1 morefreedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to...CVE-2017-1000456Fix available8.8 High
- freedesktop poppler, debian linux +1 moreIn Poppler 0.59.0, a NULL Pointer Dereference exists in the GfxImageColorMap::getGrayLine()...CVE-2017-15565Fix available8.8 High
- freedesktop poppler, debian linux +1 moreThe FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer...CVE-2017-14977Fix available7.5 High
- freedesktop poppler, debian linux +1 moreThe FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a heap-based...CVE-2017-14976Fix available7.5 High
- freedesktop poppler, debian linux +1 moreThe FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a NULL pointer...CVE-2017-14975Fix available7.5 High
- freedesktop popplerIn Poppler 0.59.0, a NULL Pointer Dereference exists in the SplashOutputDev::type3D0() function...CVE-2017-14927Fix available5.5 Medium
- freedesktop popplerIn Poppler 0.59.0, memory corruption occurs in a call to Object::dictLookup() in Object.h after a...CVE-2017-14929Fix available7.5 High
- freedesktop poppler, debian linux +1 moreIn Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Configuration:...CVE-2017-14928Fix available5.5 Medium
- freedesktop poppler, debian linux +1 moreIn Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Content::Content in Annot...CVE-2017-14926Fix available5.5 Medium
- freedesktop popplerIn Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which...CVE-2017-14617Fix available7.8 High
- freedesktop popplerIn Poppler 0.59.0, a NULL Pointer Dereference exists in the XRef::parseEntry() function in XRef...CVE-2017-14517Fix available5.5 Medium
- freedesktop popplerIn Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd() in Splash.cc,...CVE-2017-14520Fix available7.8 High
- Show moreLoading…