CVE-2017-9775
Fixed in a distro release EPSS 4%
Stack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) via a crafted PDF document.
Products: freedesktop poppler, debian_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | poppler | 0.56.0-1 |
| Debian 12 | poppler | 0.57.0-2 |
| Debian 13 | poppler | 0.57.0-2 |
| Debian 14 | poppler | 0.57.0-2 |
| Debian 7 | poppler | 0.18.4-6+deb7u2 |
| Debian 8 | poppler | 0.26.5-2+deb8u2 |
| Debian 9 | poppler | 0.48.0-2+deb9u1 |
| Red Hat Enterprise Linux 7 | poppler | 0:0.26.5-17.el7_4 |
| Red Hat Enterprise Linux 7 | poppler-cpp | 0:0.26.5-17.el7_4 |
| Red Hat Enterprise Linux 7 | poppler-cpp-devel | 0:0.26.5-17.el7_4 |
| Red Hat Enterprise Linux 7 | poppler-debuginfo | 0:0.26.5-17.el7_4 |
| Red Hat Enterprise Linux 7 | poppler-demos | 0:0.26.5-17.el7_4 |
| Red Hat Enterprise Linux 7 | poppler-devel | 0:0.26.5-17.el7_4 |
| Red Hat Enterprise Linux 7 | poppler-glib | 0:0.26.5-17.el7_4 |
| Red Hat Enterprise Linux 7 | poppler-glib-devel | 0:0.26.5-17.el7_4 |
| Red Hat Enterprise Linux 7 | poppler-qt | 0:0.26.5-17.el7_4 |
| Red Hat Enterprise Linux 7 | poppler-qt-devel | 0:0.26.5-17.el7_4 |
| Red Hat Enterprise Linux 7 | poppler-utils | 0:0.26.5-17.el7_4 |
| SUSE Linux Enterprise Desktop 12 SP2 | poppler | 0.24.4-14.6.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | poppler | 0.43.0-16.5.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | poppler-qt | 0.43.0-16.5.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | poppler | 0.43.0-16.5.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | poppler-qt | 0.43.0-16.5.1 |
| SUSE Linux Enterprise Server 12 SP2 | poppler | 0.24.4-14.6.1 |
| SUSE Linux Enterprise Server 12 SP2 | poppler | 0.43.0-16.5.1 |
| SUSE Linux Enterprise Server 12 SP2 | poppler-qt | 0.43.0-16.5.1 |
| SUSE Linux Enterprise Server 12 SP3 | poppler | 0.43.0-16.5.1 |
| SUSE Linux Enterprise Server 12 SP3 | poppler-qt | 0.43.0-16.5.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | poppler | 0.43.0-16.5.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | poppler | 0.24.4-14.6.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | poppler-qt | 0.43.0-16.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | poppler | 0.24.4-14.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | poppler | 0.43.0-16.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | poppler-qt | 0.43.0-16.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | poppler | 0.43.0-16.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | poppler-qt | 0.43.0-16.5.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | poppler | 0.43.0-16.5.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | poppler-qt | 0.43.0-16.5.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | poppler | 0.43.0-16.5.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | poppler | 0.24.4-14.6.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | poppler-qt | 0.43.0-16.5.1 |
| Ubuntu 14.04 LTS | poppler | 0.24.5-2ubuntu4.5 |
| Ubuntu 16.04 LTS | poppler | 0.41.0-0ubuntu1.2 |