Bugzilla – Bug 1179163
VUL-0: CVE-2020-27778: poppler: poppler: buffer overflow in pdftohtml could result in a DoS
Last modified: 2023-06-14 14:55:46 UTC
CVE-2020-27778 In poppler-v0.75.0 in pdftohtml there is a buffer overflow. References: https://bugzilla.redhat.com/show_bug.cgi?id=1900712 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-27778 https://gitlab.freedesktop.org/poppler/poppler/-/issues/742 https://gitlab.freedesktop.org/poppler/poppler/-/commit/30c731b487190c02afff3f036736a392eb60cd9a
Tracked as affected SLE15 SLE12-SP2 and SLE12 SLE11-SP1. I successfully reproduced the issue, using the POC in SLE15 and SLE12-SP2. I did not test SLE12. Testing SLE11-SP1 resulted in an infinite loop and then a a segmentation fault but probably from another reason. Briefly checking the code, the patch seems applicable in all codestreams. xpdf in SLE11-SP1 seems not affected, seems I could not locate the vulnerable code
Created attachment 843844 [details] poc
SLE15-SP2 and Factory ship a fixed version
SUSE-SU-2021:3854-1: An update that fixes 21 vulnerabilities is now available. Category: security (important) Bug References: 1092945,1102531,1107597,1114966,1115185,1115186,1115187,1115626,1120495,1120496,1120939,1120956,1124150,1127329,1129202,1130229,1131696,1131722,1142465,1143950,1179163 CVE References: CVE-2017-18267,CVE-2018-13988,CVE-2018-16646,CVE-2018-18897,CVE-2018-19058,CVE-2018-19059,CVE-2018-19060,CVE-2018-19149,CVE-2018-20481,CVE-2018-20551,CVE-2018-20650,CVE-2018-20662,CVE-2019-10871,CVE-2019-10872,CVE-2019-14494,CVE-2019-7310,CVE-2019-9200,CVE-2019-9631,CVE-2019-9903,CVE-2019-9959,CVE-2020-27778 JIRA References: Sources used: SUSE Linux Enterprise Workstation Extension 15-SP2 (src): poppler-0.62.0-4.6.1 SUSE Linux Enterprise Server for SAP 15-SP1 (src): poppler-0.62.0-4.6.1 SUSE Linux Enterprise Server for SAP 15 (src): poppler-0.62.0-4.6.1 SUSE Linux Enterprise Server 15-SP1-LTSS (src): poppler-0.62.0-4.6.1 SUSE Linux Enterprise Server 15-SP1-BCL (src): poppler-0.62.0-4.6.1 SUSE Linux Enterprise Server 15-LTSS (src): poppler-0.62.0-4.6.1 SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (src): poppler-0.62.0-4.6.1 SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (src): poppler-0.62.0-4.6.1 SUSE Linux Enterprise High Performance Computing 15-LTSS (src): poppler-0.62.0-4.6.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS (src): poppler-0.62.0-4.6.1 SUSE Enterprise Storage 6 (src): poppler-0.62.0-4.6.1 SUSE CaaS Platform 4.0 (src): poppler-0.62.0-4.6.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
openSUSE-SU-2021:3854-1: An update that fixes 21 vulnerabilities is now available. Category: security (important) Bug References: 1092945,1102531,1107597,1114966,1115185,1115186,1115187,1115626,1120495,1120496,1120939,1120956,1124150,1127329,1129202,1130229,1131696,1131722,1142465,1143950,1179163 CVE References: CVE-2017-18267,CVE-2018-13988,CVE-2018-16646,CVE-2018-18897,CVE-2018-19058,CVE-2018-19059,CVE-2018-19060,CVE-2018-19149,CVE-2018-20481,CVE-2018-20551,CVE-2018-20650,CVE-2018-20662,CVE-2019-10871,CVE-2019-10872,CVE-2019-14494,CVE-2019-7310,CVE-2019-9200,CVE-2019-9631,CVE-2019-9903,CVE-2019-9959,CVE-2020-27778 JIRA References: Sources used: openSUSE Leap 15.3 (src): poppler-0.62.0-4.6.1
SUSE-SU-2022:1723-1: An update that fixes 8 vulnerabilities is now available. Category: security (moderate) Bug References: 1124150,1129202,1130229,1131696,1131722,1142465,1143950,1179163 CVE References: CVE-2019-10871,CVE-2019-10872,CVE-2019-14494,CVE-2019-7310,CVE-2019-9631,CVE-2019-9903,CVE-2019-9959,CVE-2020-27778 JIRA References: Sources used: SUSE Linux Enterprise Software Development Kit 12-SP5 (src): poppler-0.43.0-16.19.3, poppler-qt-0.43.0-16.19.3 SUSE Linux Enterprise Server 12-SP5 (src): poppler-0.43.0-16.19.3, poppler-qt-0.43.0-16.19.3 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2022:1724-1: An update that fixes 7 vulnerabilities is now available. Category: security (moderate) Bug References: 1124150,1129202,1131696,1131722,1142465,1143950,1179163 CVE References: CVE-2019-10871,CVE-2019-10872,CVE-2019-14494,CVE-2019-7310,CVE-2019-9631,CVE-2019-9959,CVE-2020-27778 JIRA References: Sources used: SUSE Linux Enterprise Software Development Kit 12-SP5 (src): poppler-0.24.4-14.20.2 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Thanks to David, feels like fixed everywhere. I suggest to close this bug.