Freedesktop

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-9776 3Debian FreedesktopRedhat 8Debian Linux Enterprise Linux DesktopEnterprise Linux Server+5 more May 13, 2026 Jun 22, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact v...Show more Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document.Show less
CVE-2017-9775 3Debian FreedesktopRedhat 8Debian Linux Enterprise Linux DesktopEnterprise Linux Server+5 more May 13, 2026 Jun 22, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Stack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) via a crafted PDF document.
CVE-2017-7515 1Freedesktop 1Poppler May 13, 2026 Jun 6, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of-service.
CVE-2017-9408 2Debian Freedesktop 2Debian Linux Poppler May 13, 2026 Jun 2, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In Poppler 0.54.0, a memory leak vulnerability was found in the function Object::initArray in Object.cc, which allows attackers to cause a denial of service via a crafted file.
CVE-2017-9406 2Debian Freedesktop 2Debian Linux Poppler May 13, 2026 Jun 2, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In Poppler 0.54.0, a memory leak vulnerability was found in the function gmalloc in gmem.cc, which allows attackers to cause a denial of service via a crafted file.
CVE-2017-7511 1Freedesktop 1Poppler May 13, 2026 May 30, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents.
CVE-2017-9083 1Freedesktop 1Poppler May 13, 2026 May 19, 2017 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 poppler 0.54.0, as used in Evince and other products, has a NULL pointer dereference in the JPXStream::readUByte function in JPXStream.cc. For example, the perf_test utility will crash (segmentation fault) when parsing a...Show more poppler 0.54.0, as used in Evince and other products, has a NULL pointer dereference in the JPXStream::readUByte function in JPXStream.cc. For example, the perf_test utility will crash (segmentation fault) when parsing an invalid PDF file.Show less
CVE-2017-6355 1Freedesktop 1Virglrenderer May 13, 2026 Mar 10, 2017 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Integer overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (process crash) via crafted pkt_length and offlen values, wh...Show more Integer overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (process crash) via crafted pkt_length and offlen values, which trigger an out-of-bounds access.Show less
CVE-2016-2568 2Freedesktop Redhat 2Enterprise Linux Polkit May 13, 2026 Feb 13, 2017 N/A· v4 7.8 HIGH· v3 4.4 MEDIUM· v2 pkexec, when used with --user nonpriv, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
CVE-2016-2090 4Canonical DebianFedoraproject+1 more 4Debian Linux FedoraLibbsd+1 more May 13, 2026 Jan 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow.
CVE-2015-8868 4Canonical DebianFedoraproject+1 more 4Debian Linux FedoraPoppler+1 more May 6, 2026 May 6, 2016 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrar...Show more Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via an invalid blend mode in the ExtGState dictionary in a crafted PDF document.Show less
CVE-2015-0245 2Freedesktop Opensuse 2Dbus Opensuse May 6, 2026 Feb 13, 2015 N/A· v4 N/A· v3 1.9 LOW· v2 D-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not validate the source of ActivationFailure signals, which allows local users to cause a denial of service (activation failure e...Show more D-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not validate the source of ActivationFailure signals, which allows local users to cause a denial of service (activation failure error returned) by leveraging a race condition involving sending an ActivationFailure signal before systemd responds.Show less
CVE-2014-7824 4Canonical DebianFreedesktop+1 more 4Dbus Debian LinuxMageia+1 more May 6, 2026 Nov 18, 2014 N/A· v4 N/A· v3 2.1 LOW· v2 D-Bus 1.3.0 through 1.6.x before 1.6.26, 1.8.x before 1.8.10, and 1.9.x before 1.9.2 allows local users to cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of fi...Show more D-Bus 1.3.0 through 1.6.x before 1.6.26, 1.8.x before 1.8.10, and 1.9.x before 1.9.2 allows local users to cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3636.1.Show less
CVE-2014-3636 3D Bus Project FreedesktopOpensuse 3D Bus DbusOpensuse May 6, 2026 Oct 25, 2014 N/A· v4 N/A· v3 1.9 LOW· v2 D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors or...Show more D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a denial of service (prevention of new connections and connection drop) by queuing the maximum number of file descriptors or (2) cause a denial of service (disconnect) via multiple messages that combine to have more than the allowed number of file descriptors for a single sendmsg call.Show less
CVE-2014-3639 3D Bus Project FreedesktopOpensuse 3D Bus DbusOpensuse May 6, 2026 Sep 22, 2014 N/A· v4 N/A· v3 2.1 LOW· v2 The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections, which allows local users to cause a denial of service (incomplete connection consumption and prevention of new connec...Show more The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections, which allows local users to cause a denial of service (incomplete connection consumption and prevention of new connections) via a large number of incomplete connections.Show less
CVE-2014-3638 3D Bus Project FreedesktopOpensuse 3D Bus DbusOpensuse May 6, 2026 Sep 22, 2014 N/A· v4 N/A· v3 2.1 LOW· v2 The bus_connections_check_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x before 1.8.8 allows local users to cause a denial of service (CPU consumption) via a large number of method calls.
CVE-2014-3637 2Freedesktop Opensuse 2Dbus Opensuse May 6, 2026 Sep 22, 2014 N/A· v4 N/A· v3 2.1 LOW· v2 D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that have terminated, which allows local users to cause a denial of service via a D-bus message containing...Show more D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for processes that have terminated, which allows local users to cause a denial of service via a D-bus message containing a D-Bus connection file descriptor.Show less
CVE-2014-3635 3D Bus Project FreedesktopOpensuse 3D Bus DbusOpensuse May 6, 2026 Sep 22, 2014 N/A· v4 N/A· v3 4.4 MEDIUM· v2 Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit system and the max_message_unix_fds limit is set to an odd number, allows local users to cause a denial of serv...Show more Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit system and the max_message_unix_fds limit is set to an odd number, allows local users to cause a denial of service (dbus-daemon crash) or possibly execute arbitrary code by sending one more file descriptor than the limit, which triggers a heap-based buffer overflow or an assertion failure.Show less
CVE-2010-5110 1Freedesktop 1Poppler May 6, 2026 Aug 29, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 DCTStream.cc in Poppler before 0.13.3 allows remote attackers to cause a denial of service (crash) via a crafted PDF file.
CVE-2014-3533 4Debian FreedesktopMageia Project+1 more 4Dbus Debian LinuxMageia+1 more May 6, 2026 Jul 19, 2014 N/A· v4 N/A· v3 2.1 LOW· v2 dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invali...Show more dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message containing an invalid file descriptor.Show less

Previous 1...4 567 8 Next