CVE:CVE-2018-18897
CNNVD:CNNVD-201811-031
Poppler是一个用于生成PDF的C++类库，该库是从Xpdf（PDF阅读器）继承而来。
Poppler 0.71.0版本中的GfxState.cc文件的‘GfxColorSpace::setDisplayProfile’函数存在内存泄露漏洞。攻击者可利用该漏洞造成拒绝服务。
solution:Upgrade freedesktop poppler to a higher version than 0.71.0,and avoid the version 0.71.0; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,18.10,19.04,and avoid the version 16.04,18.04,18.10,19.04; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_eus to a higher version than 8.1,8.2,8.4,8.6,and avoid the version 8.1,8.2,8.4,8.6; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 8.2,8.4,8.6,and avoid the version 8.2,8.4,8.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 8.2,8.4,8.6,and avoid the version 8.2,8.4,8.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0