CVE-2019-9545
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2019-9545
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-9545.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2019-9545
- Related
- Published
- 2019-03-01T19:29:02Z
- Modified
- 2024-08-01T09:15:12.518123Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
An issue was discovered in Poppler 0.74.0. A recursive function call, in JBIG2Stream::readTextRegion() located in JBIG2Stream.cc, can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to JBIG2Bitmap::clearToZero.
- References
Affected packages
Debian:11 / poppler
Package
- Name
- poppler
- Purl
- pkg:deb/debian/poppler?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
20.*
20.09.0-3.1
20.09.0-3.1+deb11u1
21.*
21.02.0-1
21.06.0-1
21.06.1-1
21.11.0-1
22.*
22.02.0-1
22.02.0-2
22.02.0-3
22.06.0-1
22.08.0-1
22.08.0-2
22.08.0-2.1
22.11.0-1
22.12.0-1
22.12.0-2
22.12.0-2.1
22.12.0-2.2
23.*
23.08.0-1
23.08.0-2
23.12.0-1
24.*
24.02.0-1
24.02.0-2
24.02.0-3
24.02.0-4
24.02.0-5
24.02.0-5+loong64
24.06.0-1
24.06.0-2
Debian:12 / poppler
Package
- Name
- poppler
- Purl
- pkg:deb/debian/poppler?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Debian:13 / poppler
Package
- Name
- poppler
- Purl
- pkg:deb/debian/poppler?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Git / gitlab.freedesktop.org/poppler/poppler
Affected ranges
- Type
- GIT
- Repo
- https://gitlab.freedesktop.org/poppler/poppler
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affected
Affected versions
poppler-0.*
poppler-0.10.0
poppler-0.11.0
poppler-0.11.1
poppler-0.11.2
poppler-0.11.3
poppler-0.12.0
poppler-0.13.1
poppler-0.13.2
poppler-0.13.3
poppler-0.13.4
poppler-0.14.0
poppler-0.15.0
poppler-0.15.1
poppler-0.15.2
poppler-0.15.3
poppler-0.16.0
poppler-0.17.0
poppler-0.17.1
poppler-0.17.2
poppler-0.17.3
poppler-0.17.4
poppler-0.18.0
poppler-0.19.0
poppler-0.19.1
poppler-0.19.2
poppler-0.19.3
poppler-0.19.4
poppler-0.2.0
poppler-0.20.0
poppler-0.20.1
poppler-0.20.2
poppler-0.20.3
poppler-0.20.4
poppler-0.20.5
poppler-0.21.0
poppler-0.21.1
poppler-0.21.2
poppler-0.21.3
poppler-0.21.4
poppler-0.22.0
poppler-0.22.1
poppler-0.22.2
poppler-0.22.3
poppler-0.22.4
poppler-0.23.0
poppler-0.23.1
poppler-0.23.2
poppler-0.23.3
poppler-0.23.4
poppler-0.24.0
poppler-0.24.1
poppler-0.24.2
poppler-0.24.3
poppler-0.24.4
poppler-0.24.5
poppler-0.25.0
poppler-0.25.1
poppler-0.25.2
poppler-0.25.3
poppler-0.26.0
poppler-0.26.1
poppler-0.26.2
poppler-0.26.3
poppler-0.26.4
poppler-0.28.0
poppler-0.28.1
poppler-0.29.0
poppler-0.3.0
poppler-0.3.1
poppler-0.3.2
poppler-0.3.3
poppler-0.30.0
poppler-0.31.0
poppler-0.32.0
poppler-0.33.0
poppler-0.34.0
poppler-0.35.0
poppler-0.36
poppler-0.37
poppler-0.38.0
poppler-0.39
poppler-0.4.0
poppler-0.40.0
poppler-0.41.0
poppler-0.42.0
poppler-0.43
poppler-0.44
poppler-0.45
poppler-0.46
poppler-0.47
poppler-0.48
poppler-0.49
poppler-0.5.0
poppler-0.5.1
poppler-0.5.2
poppler-0.5.3
poppler-0.5.4
poppler-0.50
poppler-0.51
poppler-0.52
poppler-0.53
poppler-0.54
poppler-0.55
poppler-0.56
poppler-0.57
poppler-0.58
poppler-0.59
poppler-0.6.0
poppler-0.6.0.RC1
poppler-0.60
poppler-0.60.1
poppler-0.61
poppler-0.61.1
poppler-0.62.0
poppler-0.63.0
poppler-0.64.0
poppler-0.65.0
poppler-0.66.0
poppler-0.67.0
poppler-0.68.0
poppler-0.69.0
poppler-0.7.0
poppler-0.7.1
poppler-0.7.2
poppler-0.7.3
poppler-0.70.0
poppler-0.70.1
poppler-0.71.0
poppler-0.72.0
poppler-0.73.0
poppler-0.74.0
poppler-0.8.0
poppler-0.9.0
poppler-0.9.1
poppler-0.9.2
poppler-0.9.3
Other
poppler-before-fontconfig