Bug 2234528 (CVE-2022-37051)

Summary:	CVE-2022-37051 poppler: abort in main() in pdfunite.cc
Product:	[Other] Security Response	Reporter:	Guilherme de Almeida Suckevicz <gsuckevi>
Component:	vulnerability	Assignee:	Product Security <prodsec-ir-bot>
Status:	NEW ---	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	desktop-qa-list, erack, jhorak, jridky, mkasik, stransky, tkorbar, tpopela, zdohnal
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:	An issue was discovered in Poppler, where a reachable abort which leads to denial of service because the main function in pdfunite.cc lacks a stream check before saving an embedded file.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2234549, 2234550, 2234551, 2234552, 2234553, 2234555, 2234556, 2234557, 2234559, 2234560, 2234562, 2234563, 2234564, 2234565, 2234566
Bug Blocks:	2234525

Description Guilherme de Almeida Suckevicz 2023-08-24 18:43:13 UTC

An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of service because the main function in pdfunite.cc lacks a stream check before saving an embedded file.

Reference:
https://gitlab.freedesktop.org/poppler/poppler/-/issues/1276
https://gitlab.freedesktop.org/poppler/poppler/-/commit/4631115647c1e4f0482ffe0491c2f38d2231337b

Comment 1 Guilherme de Almeida Suckevicz 2023-08-24 18:57:55 UTC

Created mingw-poppler tracking bugs for this issue:

Affects: fedora-all [bug 2234549]


Created poppler tracking bugs for this issue:

Affects: fedora-all [bug 2234550]