CVE-2022-37050
22.08.2023, 19:16
In Poppler 22.07.0, PDFDoc::savePageAs in PDFDoc.c callows attackers to cause a denial-of-service (application crashes with SIGABRT) by crafting a PDF file in which the xref data structure is mishandled in getCatalog processing. Note that this vulnerability is caused by the incomplete patch of CVE-2018-20662.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| freedesktop | poppler | 22.07.0 |
| debian | debian_linux | 10.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libpoppler-cpp0 |
| ||||||||||||||||||||||
| libpoppler-devel |
| ||||||||||||||||||||||
| libpoppler-glib-devel |
| ||||||||||||||||||||||
| libpoppler-glib8 |
| ||||||||||||||||||||||
| libpoppler-qt4-4 |
| ||||||||||||||||||||||
| libpoppler117 |
| ||||||||||||||||||||||
| libpoppler60 |
| ||||||||||||||||||||||
| libpoppler73 |
| ||||||||||||||||||||||
| libpoppler89 |
| ||||||||||||||||||||||
| poppler-tools |
| ||||||||||||||||||||||
| typelib-1_0-Poppler-0_18 |
|
References