CVE-2009-1181
published 2009-04-23CVE-2009-1181: The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of…
PriorityP418medium4.3CVSS 2.0
AVNACMAuNCNINAP
EPSS
3.80%
88.8th percentile
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a NULL pointer dereference.
Affected
150 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | cups | <= 1.3.9 | — |
| apple | cups | — | — |
| apple | cups | — | — |
| apple | cups | — | — |
| apple | cups | — | — |
| apple | cups | — | — |
| apple | cups | — | — |
| apple | cups | — | — |
| apple | cups | — | — |
| apple | cups | — | — |
| apple | cups | — | — |
| apple | cups | — | — |
| apple | cups | — | — |
| apple | cups | — | — |
| apple | cups | — | — |
| apple | cups | — | — |
| apple | cups | — | — |
| apple | cups | — | — |
| apple | cups | — | — |
| apple | cups | — | — |
| apple | cups | — | — |
| apple | cups | — | — |
| apple | cups | — | — |
| apple | cups | — | — |
| apple | cups | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv4.3MEDIUM
vendor_redhat6.6MEDIUM
vendor_debian4.3MEDIUM
vendor_ubuntu4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
vhost_vdpa: fix the crash in unmap a large memory
osv·2025-12-30
CVE-2022-50851 vhost_vdpa: fix the crash in unmap a large memory
vhost_vdpa: fix the crash in unmap a large memory
In the Linux kernel, the following vulnerability has been resolved:
vhost_vdpa: fix the crash in unmap a large memory
While testing in vIOMMU, sometimes Guest will unmap very large memory,
which will cause the crash. To fix this, add a new function
vhost_vdpa_general_unmap(). This function will only unmap the memory
that saved in iotlb.
Call Trace:
[ 647.820144] ------------[ cut here ]------------
[ 647.820848] kernel BUG at drivers/iommu/intel/iommu.c:1174!
[ 647.821486] invalid opcode: 0000 [#1] PREEMPT SMP PTI
[ 647.822082] CPU: 10 PID: 1181 Comm: qemu-system-x86 Not tainted 6.0.0-rc1home_lulu_2452_lulu7_vhost+ #62
[ 647.823139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.15.0-29-g6a62e0cb0dfe-prebuilt.qem4
[ 647.
GHSA
GHSA-2hrx-xwqf-pfcv: The JBIG2 decoder in Xpdf 3
ghsa_unreviewed·2022-05-02
CVE-2009-1181 [MEDIUM] GHSA-2hrx-xwqf-pfcv: The JBIG2 decoder in Xpdf 3
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a NULL pointer dereference.
OSV
CVE-2009-1181: The JBIG2 decoder in Xpdf 3
osv·2009-04-23·CVSS 4.3
CVE-2009-1181 [MEDIUM] CVE-2009-1181: The JBIG2 decoder in Xpdf 3
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a NULL pointer dereference.
Red Hat
kernel: Linux kernel (vhost_vdpa): Denial of service via large memory unmap
vendor_redhat·2025-12-30·CVSS 6.6
CVE-2022-50851 [MEDIUM] CWE-754 kernel: Linux kernel (vhost_vdpa): Denial of service via large memory unmap
kernel: Linux kernel (vhost_vdpa): Denial of service via large memory unmap
In the Linux kernel, the following vulnerability has been resolved:
vhost_vdpa: fix the crash in unmap a large memory
While testing in vIOMMU, sometimes Guest will unmap very large memory,
which will cause the crash. To fix this, add a new function
vhost_vdpa_general_unmap(). This function will only unmap the memory
that saved in iotlb.
Call Trace:
[ 647.820144] ------------[ cut here ]------------
[ 647.820848] kernel BUG at drivers/iommu/intel/iommu.c:1174!
[ 647.821486] invalid opcode: 0000 [#1] PREEMPT SMP PTI
[ 647.822082] CPU: 10 PID: 1181 Comm: qemu-system-x86 Not tainted 6.0.0-rc1home_lulu_2452_lulu7_vhost+ #62
[ 647.823139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.15.0-29-g6a62e0cb0d
Ubuntu
KOffice vulnerabilities
vendor_ubuntu·2010-08-17·CVSS 4.3
CVE-2009-0165 [MEDIUM] KOffice vulnerabilities
Title: KOffice vulnerabilities
Summary: PDF import support has been disabled in KWord due to many security
vulnerabilities that could be used by an attacker to run programs as your
login.
Will Dormann, Alin Rad Pop, Braden Thomas, and Drew Yao discovered that the
Xpdf used in KOffice contained multiple security issues in its JBIG2
decoder. If a user or automated system were tricked into opening a crafted
PDF file, an attacker could cause a denial of service or execute arbitrary
code with privileges of the user invoking the program. (CVE-2009-0146,
CVE-2009-0147, CVE-2009-0166, CVE-2009-0799, CVE-2009-0800, CVE-2009-1179,
CVE-2009-1180, CVE-2009-1181)
It was discovered that the Xpdf used in KOffice contained multiple security
issues when parsing malformed PDF documents. If a user or auto
Ubuntu
poppler vulnerabilities
vendor_ubuntu·2009-04-16
CVE-2009-1187 poppler vulnerabilities
Title: poppler vulnerabilities
Summary: poppler vulnerabilities
Will Dormann, Alin Rad Pop, Braden Thomas, and Drew Yao discovered that
poppler contained multiple security issues in its JBIG2 decoder. If a user
or automated system were tricked into opening a crafted PDF file, an
attacker could cause a denial of service or execute arbitrary code with
privileges of the user invoking the program.
Instructions: In general, a standard system upgrade is sufficient to effect the
necessary changes.
Red Hat
PDF JBIG2 NULL dereference
vendor_redhat·2009-04-16·CVSS 4.3
CVE-2009-1181 [MEDIUM] CWE-476 PDF JBIG2 NULL dereference
PDF JBIG2 NULL dereference
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a NULL pointer dereference.
Debian
CVE-2009-1181: poppler - The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler b...
vendor_debian·2009·CVSS 4.3
CVE-2009-1181 [MEDIUM] CVE-2009-1181: poppler - The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler b...
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a NULL pointer dereference.
Scope: local
bookworm: resolved (fixed in 0.10.6-1)
bullseye: resolved (fixed in 0.10.6-1)
forky: resolved (fixed in 0.10.6-1)
sid: resolved (fixed in 0.10.6-1)
trixie: resolved (fixed in 0.10.6-1)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2022-50851 kernel: Linux kernel (vhost_vdpa): Denial of service via large memory unmap
bugzilla·2025-12-30
CVE-2022-50851 [MEDIUM] CVE-2022-50851 kernel: Linux kernel (vhost_vdpa): Denial of service via large memory unmap
CVE-2022-50851 kernel: Linux kernel (vhost_vdpa): Denial of service via large memory unmap
In the Linux kernel, the following vulnerability has been resolved:
vhost_vdpa: fix the crash in unmap a large memory
While testing in vIOMMU, sometimes Guest will unmap very large memory,
which will cause the crash. To fix this, add a new function
vhost_vdpa_general_unmap(). This function will only unmap the memory
that saved in iotlb.
Call Trace:
[ 647.820144] ------------[ cut here ]------------
[ 647.820848] kernel BUG at drivers/iommu/intel/iommu.c:1174!
[ 647.821486] invalid opcode: 0000 [#1] PREEMPT SMP PTI
[ 647.822082] CPU: 10 PID: 1181 Comm: qemu-system-x86 Not tainted 6.0.0-rc1home_lulu_2452_lulu7_vhost+ #62
[ 647.823139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.1
Bugzilla
CVE-2009-0146 CVE-2009-0147 CVE-2009-0166 CVE-2009-0799 CVE-2009-0800 CVE-2009-1179 CVE-2009-1180 CVE-2009-1181 CVE-2009-1182 CVE-2009-1183 CVE-2009-1187 CVE-2009-1188 poppler various flaws [F10]
bugzilla·2009-04-21·CVSS 4.3
CVE-2009-0146 [MEDIUM] CVE-2009-0146 CVE-2009-0147 CVE-2009-0166 CVE-2009-0799 CVE-2009-0800 CVE-2009-1179 CVE-2009-1180 CVE-2009-1181 CVE-2009-1182 CVE-2009-1183 CVE-2009-1187 CVE-2009-1188 poppler various flaws [F10]
CVE-2009-0146 CVE-2009-0147 CVE-2009-0166 CVE-2009-0799 CVE-2009-0800 CVE-2009-1179 CVE-2009-1180 CVE-2009-1181 CVE-2009-1182 CVE-2009-1183 CVE-2009-1187 CVE-2009-1188 poppler various flaws [F10]
F10 tracking bug: see blocks bug list for full details of the security issue(s).
This bug is never intended to be made public, please put any public notes in the 'blocks' bugs.
NOTE THIS ISSUE IS CURRENTLY EMBARGOED, DO NOT MAKE PUBLIC COMMITS OR COMMENTS ABOUT THIS ISSUE.
[bug automatically created by: add-tracking-bugs]
Discussion:
Fixed upstream in 0.10.6.
---
poppler-0.8.7-6.fc10 has been submitted as an update for Fedora 10.
http://admin.fedoraproject.org/updates/poppler-0.8.7-6.fc10
---
poppler-0.8.7-6.fc10 has been pushed to the Fedora 10 stable repository. If problems still persi
Bugzilla
CVE-2009-0146 CVE-2009-0147 CVE-2009-0166 CVE-2009-0799 CVE-2009-0800 CVE-2009-1179 CVE-2009-1180 CVE-2009-1181 CVE-2009-1182 CVE-2009-1183 CVE-2009-1187 CVE-2009-1188 poppler various flaws [F11]
bugzilla·2009-04-21·CVSS 4.3
CVE-2009-0146 [MEDIUM] CVE-2009-0146 CVE-2009-0147 CVE-2009-0166 CVE-2009-0799 CVE-2009-0800 CVE-2009-1179 CVE-2009-1180 CVE-2009-1181 CVE-2009-1182 CVE-2009-1183 CVE-2009-1187 CVE-2009-1188 poppler various flaws [F11]
CVE-2009-0146 CVE-2009-0147 CVE-2009-0166 CVE-2009-0799 CVE-2009-0800 CVE-2009-1179 CVE-2009-1180 CVE-2009-1181 CVE-2009-1182 CVE-2009-1183 CVE-2009-1187 CVE-2009-1188 poppler various flaws [F11]
Fdevel tracking bug: see blocks bug list for full details of the security issue(s).
This bug is never intended to be made public, please put any public notes in the 'blocks' bugs.
NOTE THIS ISSUE IS CURRENTLY EMBARGOED, DO NOT MAKE PUBLIC COMMITS OR COMMENTS ABOUT THIS ISSUE.
[bug automatically created by: add-tracking-bugs]
Discussion:
Fixed upstream in 0.10.6.
---
Affects F11 too, but there's no 11 in version list in BZ yet.
---
This bug appears to have been reported against 'rawhide' during the Fedora 11 development cycle.
Changing version to '11'.
More information and reason for thi
Bugzilla
CVE-2009-0146 CVE-2009-0147 CVE-2009-0166 CVE-2009-0799 CVE-2009-0800 CVE-2009-1179 CVE-2009-1180 CVE-2009-1181 CVE-2009-1182 CVE-2009-1183 CVE-2009-1187 CVE-2009-1188 poppler various flaws [F9]
bugzilla·2009-04-21·CVSS 4.3
CVE-2009-0146 [MEDIUM] CVE-2009-0146 CVE-2009-0147 CVE-2009-0166 CVE-2009-0799 CVE-2009-0800 CVE-2009-1179 CVE-2009-1180 CVE-2009-1181 CVE-2009-1182 CVE-2009-1183 CVE-2009-1187 CVE-2009-1188 poppler various flaws [F9]
CVE-2009-0146 CVE-2009-0147 CVE-2009-0166 CVE-2009-0799 CVE-2009-0800 CVE-2009-1179 CVE-2009-1180 CVE-2009-1181 CVE-2009-1182 CVE-2009-1183 CVE-2009-1187 CVE-2009-1188 poppler various flaws [F9]
F9 tracking bug: see blocks bug list for full details of the security issue(s).
This bug is never intended to be made public, please put any public notes in the 'blocks' bugs.
NOTE THIS ISSUE IS CURRENTLY EMBARGOED, DO NOT MAKE PUBLIC COMMITS OR COMMENTS ABOUT THIS ISSUE.
[bug automatically created by: add-tracking-bugs]
Discussion:
Fixed upstream in 0.10.6.
---
This message is a reminder that Fedora 9 is nearing its end of life.
Approximately 30 (thirty) days from now Fedora will stop maintaining
and issuing updates for Fedora 9. It is Fedora's policy to close all
bug reports from releases
Bugzilla
CVE-2009-1181 PDF JBIG2 NULL dereference
bugzilla·2009-04-15·CVSS 4.3
CVE-2009-1181 [MEDIUM] CVE-2009-1181 PDF JBIG2 NULL dereference
CVE-2009-1181 PDF JBIG2 NULL dereference
Multiple NULL derefernce flaws were found in xpdf's JBIG2 decoder. A
carefully crafted PDF file could cause xpdf to crash when opened.
Will Dormann of the CERT/CC created the extensive testsuite for the JBIG2
decoder in various PDF libraries that found this flaw.
Acknowledgements:
Red Hat would like to thank Will Dormann of the CERT/CC for responsibly
reporting these flaws.
Discussion:
Embargo has been lifted.
---
xpdf-3.02-13.fc9 has been submitted as an update for Fedora 9.
http://admin.fedoraproject.org/updates/xpdf-3.02-13.fc9
---
xpdf-3.02-13.fc10 has been submitted as an update for Fedora 10.
http://admin.fedoraproject.org/updates/xpdf-3.02-13.fc10
---
xpdf-3.02-13.fc9 has been pushed to the Fedora 9 stable repository. If problems
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.htmlhttp://poppler.freedesktop.org/releases.htmlhttp://rhn.redhat.com/errata/RHSA-2009-0458.htmlhttp://secunia.com/advisories/34291http://secunia.com/advisories/34481http://secunia.com/advisories/34746http://secunia.com/advisories/34755http://secunia.com/advisories/34756http://secunia.com/advisories/34852http://secunia.com/advisories/34959http://secunia.com/advisories/34963http://secunia.com/advisories/34991http://secunia.com/advisories/35037http://secunia.com/advisories/35064http://secunia.com/advisories/35065http://secunia.com/advisories/35618http://secunia.com/advisories/35685http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477http://www.debian.org/security/2009/dsa-1790http://www.debian.org/security/2009/dsa-1793http://www.kb.cert.org/vuls/id/196617http://www.mandriva.com/security/advisories?name=MDVSA-2009:101http://www.mandriva.com/security/advisories?name=MDVSA-2010:087http://www.mandriva.com/security/advisories?name=MDVSA-2011:175http://www.redhat.com/support/errata/RHSA-2009-0429.htmlhttp://www.redhat.com/support/errata/RHSA-2009-0430.htmlhttp://www.redhat.com/support/errata/RHSA-2009-0431.htmlhttp://www.redhat.com/support/errata/RHSA-2009-0480.htmlhttp://www.securityfocus.com/bid/34568http://www.securitytracker.com/id?1022072http://www.vupen.com/english/advisories/2009/1065http://www.vupen.com/english/advisories/2009/1066http://www.vupen.com/english/advisories/2009/1076http://www.vupen.com/english/advisories/2009/1077http://www.vupen.com/english/advisories/2010/1040https://bugzilla.redhat.com/show_bug.cgi?id=495894https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9683https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.htmlhttp://poppler.freedesktop.org/releases.htmlhttp://rhn.redhat.com/errata/RHSA-2009-0458.htmlhttp://secunia.com/advisories/34291http://secunia.com/advisories/34481http://secunia.com/advisories/34746http://secunia.com/advisories/34755http://secunia.com/advisories/34756http://secunia.com/advisories/34852http://secunia.com/advisories/34959http://secunia.com/advisories/34963http://secunia.com/advisories/34991http://secunia.com/advisories/35037http://secunia.com/advisories/35064http://secunia.com/advisories/35065http://secunia.com/advisories/35618http://secunia.com/advisories/35685http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477http://www.debian.org/security/2009/dsa-1790http://www.debian.org/security/2009/dsa-1793http://www.kb.cert.org/vuls/id/196617http://www.mandriva.com/security/advisories?name=MDVSA-2009:101http://www.mandriva.com/security/advisories?name=MDVSA-2010:087http://www.mandriva.com/security/advisories?name=MDVSA-2011:175http://www.redhat.com/support/errata/RHSA-2009-0429.htmlhttp://www.redhat.com/support/errata/RHSA-2009-0430.htmlhttp://www.redhat.com/support/errata/RHSA-2009-0431.htmlhttp://www.redhat.com/support/errata/RHSA-2009-0480.htmlhttp://www.securityfocus.com/bid/34568http://www.securitytracker.com/id?1022072http://www.vupen.com/english/advisories/2009/1065http://www.vupen.com/english/advisories/2009/1066http://www.vupen.com/english/advisories/2009/1076http://www.vupen.com/english/advisories/2009/1077http://www.vupen.com/english/advisories/2010/1040https://bugzilla.redhat.com/show_bug.cgi?id=495894https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9683https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00567.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-June/msg01277.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-June/msg01291.html
2009-04-23
Published