The remote SUSE Linux SLED15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3854-1 advisory.

    - CVE-2017-18267: Fixed an infinite recursion that would allow remote attackers to cause a denial of     service (bsc#1092945).
    - CVE-2018-13988: Added an improper implementation check which otherwise could allow buffer overflows,     memory corruption, and denial of service (bsc#1102531).
    - CVE-2018-16646: Fixed an infinite recursion which could allow a denial-of-service attack via a specially     crafted PDF file (bsc#1107597).
    - CVE-2018-18897: Fixed a memory leak (bsc#1114966).
    - CVE-2018-19058: Fixed a bug which could allow a denial-of-service attack via a specially crafted PDF     file (bsc#1115187).
    - CVE-2018-19059: Fixed an out-of-bounds read access which could allow a denial-of-service attack     (bsc#1115186).
    - CVE-2018-19060: Fixed a NULL pointer dereference which could allow a denial-of-service attack     (bsc#1115185).
    - CVE-2018-19149: Fixed a NULL pointer dereference which could allow a denial-of-service attack     (bsc#1115626).
    - CVE-2018-20481: Fixed a NULL pointer dereference while handling unallocated XRef entries which could     allow a denial-of-service attack (bsc#1120495).
    - CVE-2018-20551: Fixed a reachable assertion which could allow a denial-of-service attack through     specially crafted PDF files (bsc#1120496).
    - CVE-2018-20650: Fixed a reachable assertion which could allow denial-of-service through specially     crafted PDF files (bsc#1120939).
    - CVE-2018-20662: Fixed a bug which could potentially crash the running process by SIGABRT resulting in a     denial-of-service attack through a specially crafted PDF file (bsc#1120956).
    - CVE-2019-10871: Fixed a heap-based buffer  over-read in the function PSOutputDev::checkPageSlice at     PSOutputDev.cc (bsc#1131696).
    - CVE-2019-10872: Fixed a heap-based buffer over-read in the function Splash::blitTransparent at     splash/Splash.cc (bsc#1131722).
    - CVE-2019-14494: Fixed a divide-by-zero error in the function SplashOutputDev::tilingPatternFill     (bsc#1143950).
    - CVE-2019-7310: Fixed a heap-based buffer over-read (due to an integer signedness error in the     XRef::getEntry function in XRef.cc) that allows remote attackers to cause a denial of service or possibly     have unspecified other impact via a crafted PDF document (bsc#1124150).
    - CVE-2019-9200: Fixed a heap-based buffer underwrite which could allow denial-of-service attack through a     specially crafted PDF file (bsc#1127329)
    - CVE-2019-9631: Fixed a heap-based buffer over-read  in the CairoRescaleBox.cc downsample_row_box_filter     function (bsc#1129202).
    - CVE-2019-9903: Fixed excessive stack consumption in the Dict::find() method, which can be triggered by     passing a crafted pdf file to the pdfunite binary (bsc#1130229).
    - CVE-2019-9959: Fixed integer overflow that made it possible to allocate a large memory chunk on the heap     with a size controlled by an attacker (bsc#1142465).
    - CVE-2020-27778: Fixed buffer overflow vulnerability in pdftohtml (bsc#1179163).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2907-1 advisory.

    - CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service     (bsc#1199272).
      - CVE-2018-21009: Fixed integer overflow in Parser:makeStream in Parser.cc (bsc#1149635).
      - CVE-2019-12293: Fixed heap-based buffer over-read in JPXStream:init in JPEG2000Stream.cc     (bsc#1136105).
      - CVE-2018-20481: Fixed memory leak in GfxColorSpace:setDisplayProfile in GfxState.cc (bsc#1114966).
      - CVE-2019-7310: Fixed a heap-based buffer over-read allows remote attackers to cause DOS via a special     crafted PDF (bsc#1124150).
      - CVE-2018-13988: Fixed buffer overflow in pdfunite (bsc#1102531).
      - CVE-2018-16646: Fixed infinite recursion in poppler/Parser.cc:Parser::getObj() function (bsc#1107597).
      - CVE-2018-19058: Fixed reachable abort in Object.h leading to denial of service (bsc#1115187).
      - CVE-2018-19059: Fixed out-of-bounds read in EmbFile:save2 in FileSpec.cc leading to denial of service     (bsc#1115186).
      - CVE-2018-19060: Fixed NULL pointer dereference in goo/GooString.h leading to denial of service     (bsc#1115185).
      - CVE-2018-19149: Fixed NULL pointer dereference in _poppler_attachment_new when called from     poppler_annot_file_attachment_get_attachment (bsc#1115626).
      - CVE-2017-18267: Fixed denial of service (infinite recursion) via a crafted PDF file (bsc#1092945).
      - CVE-2018-20650: Fixed issue where a reachable Object in dictLookup assertion allows attackers to cause     DOS (bsc#1120939).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2906-1 advisory.

    - CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service     (bsc#1199272).
      - CVE-2018-21009: Fixed integer overflow in Parser:makeStream in Parser.cc (bsc#1149635).
      - CVE-2018-20481: Fixed memory leak in GfxColorSpace:setDisplayProfile in GfxState.cc (bsc#1114966).
      - CVE-2019-7310: Fixed a heap-based buffer over-read allows remote attackers to cause DOS via a special     crafted PDF (bsc#1124150).
      - CVE-2018-13988: Fixed buffer overflow in pdfunite (bsc#1102531).
      - CVE-2018-16646: Fixed infinite recursion in poppler/Parser.cc:Parser::getObj() function (bsc#1107597).
      - CVE-2018-19058: Fixed reachable abort in Object.h leading to denial of service (bsc#1115187).
      - CVE-2018-19059: Fixed out-of-bounds read in EmbFile:save2 in FileSpec.cc leading to denial of service     (bsc#1115186).
      - CVE-2018-19060: Fixed NULL pointer dereference in goo/GooString.h leading to denial of service     (bsc#1115185).
      - CVE-2018-19149: Fixed NULL pointer dereference in _poppler_attachment_new when called from     poppler_annot_file_attachment_get_attachment (bsc#1115626).
      - CVE-2017-18267: Fixed denial of service (infinite recursion) via a crafted PDF file (bsc#1092945).
      - CVE-2018-20650: Fixed issue where a reachable Object in dictLookup assertion allows attackers to cause     DOS (bsc#1120939).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote attackers     to cause a denial of service (infinite recursion) via a crafted PDF file, as demonstrated by pdftops.
    (CVE-2017-18267)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3574:01 advisory.

    * libsoup: Crash in soup_cookie_jar.c:get_cookies() on empty hostnames (CVE-2018-12910)
    * poppler: Infinite recursion in fofi/FoFiType1C.cc:FoFiType1C::cvtGlyph() function allows denial of     service (CVE-2017-18267)
    * libgxps: heap based buffer over read in ft_font_face_hash function of gxps-fonts.c (CVE-2018-10733)
    * libgxps: Stack-based buffer overflow in calling glib in gxps_images_guess_content_type of gcontenttype.c     (CVE-2018-10767)
    * poppler: NULL pointer dereference in Annot.h:AnnotPath::getCoordsLength() allows for denial of service     via crafted PDF (CVE-2018-10768)
    * poppler: out of bounds read in pdfunite (CVE-2018-13988)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3140 advisory.

    GNOME is the default desktop environment of Red Hat Enterprise Linux.

    Security Fix(es):

    * libsoup: Crash in soup_cookie_jar.c:get_cookies() on empty hostnames (CVE-2018-12910)

    * poppler: Infinite recursion in fofi/FoFiType1C.cc:FoFiType1C::cvtGlyph() function allows denial of     service (CVE-2017-18267)

    * libgxps: heap based buffer over read in ft_font_face_hash function of gxps-fonts.c (CVE-2018-10733)

    * libgxps: Stack-based buffer overflow in calling glib in gxps_images_guess_content_type of gcontenttype.c     (CVE-2018-10767)

    * poppler: NULL pointer dereference in Annot.h:AnnotPath::getCoordsLength() allows for denial of service     via crafted PDF (CVE-2018-10768)

    * poppler: out of bounds read in pdfunite (CVE-2018-13988)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

    Red Hat would like to thank chenyuan (NESA Lab) for reporting CVE-2018-10733 and CVE-2018-10767 and Hosein     Askari for reporting CVE-2018-13988.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - poppler: out of bounds read in pdfunite     (CVE-2018-13988)

  - poppler: Infinite recursion in     fofi/FoFiType1C.cc:FoFiType1C::cvtGlyph() function     allows denial of service (CVE-2017-18267)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has poppler packages installed that are affected by multiple vulnerabilities:

  - Poppler through 0.62 contains an out of bounds read     vulnerability due to an incorrect memory access that is     not mapped in its memory space, as demonstrated by     pdfunite. This can result in memory corruption and     denial of service. This may be exploitable when a victim     opens a specially crafted PDF file. (CVE-2018-13988)

  - There is a NULL pointer dereference in the     AnnotPath::getCoordsLength function in Annot.h in an     Ubuntu package for Poppler 0.24.5. A crafted input will     lead to a remote denial of service attack. Later Ubuntu     packages such as for Poppler 0.41.0 are not affected.
    (CVE-2018-10768)

  - The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc     in Poppler through 0.64.0 allows remote attackers to     cause a denial of service (infinite recursion) via a     crafted PDF file, as demonstrated by pdftops.
    (CVE-2017-18267)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

GNOME is the default desktop environment of Red Hat Enterprise Linux.

Security Fix(es) :

* libsoup: Crash in soup_cookie_jar.c:get_cookies() on empty hostnames (CVE-2018-12910)

* poppler: Infinite recursion in fofi/FoFiType1C.cc:FoFiType1C::cvtGlyph() function allows denial of service (CVE-2017-18267)

* libgxps: heap based buffer over read in ft_font_face_hash function of gxps-fonts.c (CVE-2018-10733)

* libgxps: Stack-based buffer overflow in calling glib in gxps_images_guess_content_type of gcontenttype.c (CVE-2018-10767)

* poppler: NULL pointer dereference in Annot.h:AnnotPath::getCoordsLength() allows for denial of service via crafted PDF (CVE-2018-10768)

* poppler: out of bounds read in pdfunite (CVE-2018-13988)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank chenyuan (NESA Lab) for reporting CVE-2018-10733 and CVE-2018-10767 and Hosein Askari for reporting CVE-2018-13988.

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3140 advisory.

    - Backport upstream patch for CVE-2018-12910 - Crash in soup_cookie_jar.c: get_cookies() on empty     hostnames
    - Security fix for CVE-2018-15120
    - Fix crash when Object has negative number (CVE-2018-13988)
    - Fix infinite recursion on malformed documents (CVE-2017-18267)
    - Fix crash inn AnnotInk::draw() (CVE-2018-10768)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
155796	SUSE SLED15: libpoppler-cpp0 / libpoppler-devel / libpoppler-glib-devel / etc (SUSE-SU-2021:3854-1)	Nessus	SuSE Local Security Checks	2021/12/2	2026/6/26	critical
178693	SUSE SLES12: libpoppler-cpp0 / libpoppler-devel / libpoppler-glib-devel / etc (SUSE-SU-2023:2907-1)	Nessus	SuSE Local Security Checks	2023/7/21	2026/6/25	high
178695	SUSE SLES12 Security Update : poppler (SUSE-SU-2023:2906-1)	Nessus	SuSE Local Security Checks	2023/7/21	2026/6/25	high
220849	Linux Distros Unpatched Vulnerability : CVE-2017-18267	Nessus	Misc.	2025/3/4	2026/7/31	medium
289135	MiracleLinux 7 : [security - medium] GNOME (AXSA:2019-3574:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/20	critical
118726	RHEL 7 : GNOME (RHSA-2018:3140)	Nessus	Red Hat Local Security Checks	2018/11/5	2025/3/24	critical
120998	EulerOS 2.0 SP5 : poppler (EulerOS-SA-2019-1010)	Nessus	Huawei Local Security Checks	2019/1/8	2021/1/6	medium
127224	NewStart CGSL CORE 5.04 / MAIN 5.04 : poppler Multiple Vulnerabilities (NS-SA-2019-0045)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2021/1/14	medium
118995	CentOS 7 : PackageKit / accountsservice / adwaita-icon-theme / appstream-data / at-spi2-atk / etc (CESA-2018:3140)	Nessus	CentOS Local Security Checks	2018/11/16	2020/8/3	critical
181106	Oracle Linux 7 : GNOME (ELSA-2018-3140)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2024/11/1	critical

偵測

搜尋 Plugin

critical

high

high

medium

critical

critical

medium

medium

critical

critical