Home

CVE-2022-27337

Description

A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.

Risk Information

Base Score
6.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.237

Associated Vulnerability

VulnerabilityOS Platform
(RHSA-2022:8151) poppler security and bug fix update poppler-21.01.0-13.el9.i686.rpmLinux
(RHSA-2022:8151) poppler security and bug fix update poppler-21.01.0-13.el9.x86_64.rpmLinux
(RHSA-2022:8151) poppler security and bug fix update poppler-cpp-21.01.0-13.el9.i686.rpmLinux
(RHSA-2022:8151) poppler security and bug fix update poppler-cpp-21.01.0-13.el9.x86_64.rpmLinux
(RHSA-2022:8151) poppler security and bug fix update poppler-debugsource-21.01.0-13.el9.i686.rpmLinux
(RHSA-2022:8151) poppler security and bug fix update poppler-debugsource-21.01.0-13.el9.x86_64.rpmLinux
(RHSA-2022:8151) poppler security and bug fix update poppler-glib-21.01.0-13.el9.i686.rpmLinux
(RHSA-2022:8151) poppler security and bug fix update poppler-glib-21.01.0-13.el9.x86_64.rpmLinux
(RHSA-2022:8151) poppler security and bug fix update poppler-qt5-21.01.0-13.el9.i686.rpmLinux
(RHSA-2022:8151) poppler security and bug fix update poppler-qt5-21.01.0-13.el9.x86_64.rpmLinux
(RHSA-2022:8151) poppler security and bug fix update poppler-utils-21.01.0-13.el9.x86_64.rpmLinux
poppler security and bug fix update (RLSA-2022:7594) poppler-20.11.0-5.el8.i686.rpmLinux
poppler security and bug fix update (RLSA-2022:7594) poppler-20.11.0-5.el8.x86_64.rpmLinux
poppler security and bug fix update (RLSA-2022:7594) poppler-qt5-20.11.0-5.el8.i686.rpmLinux
poppler security and bug fix update (RLSA-2022:7594) poppler-qt5-20.11.0-5.el8.x86_64.rpmLinux
poppler security and bug fix update (RLSA-2022:7594) poppler-glib-20.11.0-5.el8.i686.rpmLinux
poppler security and bug fix update (RLSA-2022:7594) poppler-glib-20.11.0-5.el8.x86_64.rpmLinux
poppler security and bug fix update (RLSA-2022:7594) poppler-utils-20.11.0-5.el8.x86_64.rpmLinux
poppler security and bug fix update (RLSA-2022:8151) poppler-21.01.0-13.el9.i686.rpmLinux
poppler security and bug fix update (RLSA-2022:8151) poppler-21.01.0-13.el9.x86_64.rpmLinux
poppler security and bug fix update (RLSA-2022:8151) poppler-cpp-21.01.0-13.el9.i686.rpmLinux
poppler security and bug fix update (RLSA-2022:8151) poppler-cpp-21.01.0-13.el9.x86_64.rpmLinux
poppler security and bug fix update (RLSA-2022:8151) poppler-qt5-21.01.0-13.el9.i686.rpmLinux
poppler security and bug fix update (RLSA-2022:8151) poppler-qt5-21.01.0-13.el9.x86_64.rpmLinux
poppler security and bug fix update (RLSA-2022:8151) poppler-glib-21.01.0-13.el9.i686.rpmLinux
poppler security and bug fix update (RLSA-2022:8151) poppler-glib-21.01.0-13.el9.x86_64.rpmLinux
poppler security and bug fix update (RLSA-2022:8151) poppler-utils-21.01.0-13.el9.x86_64.rpmLinux
SUSE-SU-2023:2907-1(SUSE Linux Enterprise Server 12 SP5 ) libpoppler-glib8-0.43.0-16.25.1.x86_64.rpmLinux
SUSE-SU-2023:2907-1(SUSE Linux Enterprise Server 12 SP5 ) libpoppler-glib8-debuginfo-0.43.0-16.25.1.x86_64.rpmLinux
SUSE-SU-2023:2907-1(SUSE Linux Enterprise Server 12 SP5 ) libpoppler-qt4-4-0.43.0-16.25.1.x86_64.rpmLinux
SUSE-SU-2023:2907-1(SUSE Linux Enterprise Server 12 SP5 ) libpoppler-qt4-4-debuginfo-0.43.0-16.25.1.x86_64.rpmLinux
SUSE-SU-2023:2907-1(SUSE Linux Enterprise Server 12 SP5 ) libpoppler60-0.43.0-16.25.1.x86_64.rpmLinux
SUSE-SU-2023:2907-1(SUSE Linux Enterprise Server 12 SP5 ) libpoppler60-debuginfo-0.43.0-16.25.1.x86_64.rpmLinux
SUSE-SU-2023:2907-1(SUSE Linux Enterprise Server 12 SP5 ) poppler-debugsource-0.43.0-16.25.1.x86_64.rpmLinux
SUSE-SU-2023:2907-1(SUSE Linux Enterprise Server 12 SP5 ) poppler-tools-0.43.0-16.25.1.x86_64.rpmLinux
SUSE-SU-2023:2907-1(SUSE Linux Enterprise Server 12 SP5 ) poppler-tools-debuginfo-0.43.0-16.25.1.x86_64.rpmLinux
PDF rendering library (USN-6273-1) libpoppler97_0.86.1-0ubuntu1.2_i386.debLinux
PDF rendering library (USN-6273-1) libpoppler97_0.86.1-0ubuntu1.2_amd64.debLinux
PDF rendering library (USN-6273-1) libpoppler118_22.02.0-2ubuntu0.2_i386.debLinux
PDF rendering library (USN-6273-1) libpoppler118_22.02.0-2ubuntu0.2_amd64.debLinux
PDF rendering library (USN-6273-1) libpoppler126_22.12.0-2ubuntu1.1_i386.debLinux
PDF rendering library (USN-6273-1) libpoppler126_22.12.0-2ubuntu1.1_amd64.debLinux
SUSE-SU-2023:3168-1(Basesystem Module 15-SP4 ) libpoppler-cpp0-debuginfo-22.01.0-150400.3.6.1.x86_64.rpmLinux
SUSE-SU-2023:3168-1(Basesystem Module 15-SP4 ) libpoppler-glib8-debuginfo-22.01.0-150400.3.6.1.x86_64.rpmLinux
SUSE-SU-2023:3168-1(Basesystem Module 15-SP4 ) libpoppler117-debuginfo-22.01.0-150400.3.6.1.x86_64.rpmLinux
SUSE-SU-2023:3168-1(Basesystem Module 15-SP4 ) poppler-debugsource-22.01.0-150400.3.6.1.x86_64.rpmLinux
SUSE-SU-2023:3168-1(Basesystem Module 15-SP4 ) poppler-tools-debuginfo-22.01.0-150400.3.6.1.x86_64.rpmLinux
SUSE-SU-2023:2941-1(Basesystem Module 15-SP4) libpoppler89-0.79.0-150200.3.11.1.x86_64.rpmLinux
SUSE-SU-2023:2941-1(Basesystem Module 15-SP5) libpoppler89-0.79.0-150200.3.11.1.x86_64.rpmLinux
SUSE-SU-2023:2941-1(Basesystem Module 15-SP4) poppler-debugsource-0.79.0-150200.3.11.1.x86_64.rpmLinux
SUSE-SU-2023:2941-1(Basesystem Module 15-SP5) poppler-debugsource-0.79.0-150200.3.11.1.x86_64.rpmLinux
SUSE-SU-2023:2941-1(Basesystem Module 15-SP4) libpoppler89-debuginfo-0.79.0-150200.3.11.1.x86_64.rpmLinux
SUSE-SU-2023:2941-1(Basesystem Module 15-SP5) libpoppler89-debuginfo-0.79.0-150200.3.11.1.x86_64.rpmLinux
Poppler update (ELSA-2022-8151) poppler-21.01.0-13.el9.i686.rpmLinux
Poppler update (ELSA-2022-8151) poppler-21.01.0-13.el9.x86_64.rpmLinux
Poppler-cpp update (ELSA-2022-8151) poppler-cpp-21.01.0-13.el9.i686.rpmLinux
Poppler-cpp update (ELSA-2022-8151) poppler-cpp-21.01.0-13.el9.x86_64.rpmLinux
Poppler-glib update (ELSA-2022-8151) poppler-glib-21.01.0-13.el9.i686.rpmLinux
Poppler-glib update (ELSA-2022-8151) poppler-glib-21.01.0-13.el9.x86_64.rpmLinux
Poppler-qt5 update (ELSA-2022-8151) poppler-qt5-21.01.0-13.el9.i686.rpmLinux
Poppler-qt5 update (ELSA-2022-8151) poppler-qt5-21.01.0-13.el9.x86_64.rpmLinux
Poppler-utils update (ELSA-2022-8151) poppler-utils-21.01.0-13.el9.x86_64.rpmLinux
poppler security update(DSA-5224-1) libpoppler102_20.09.0-3.1+deb11u1_i386.debLinux
poppler security update(DSA-5224-1) libpoppler102_20.09.0-3.1+deb11u1_amd64.debLinux
poppler security update(DSA-5224-1) libpoppler-qt5-dev_20.09.0-3.1+deb11u1_i386.debLinux
poppler security update(DSA-5224-1) libpoppler-qt5-dev_20.09.0-3.1+deb11u1_amd64.debLinux
poppler security update(DSA-5224-1) libpoppler-qt5-1_20.09.0-3.1+deb11u1_i386.debLinux
poppler security update(DSA-5224-1) libpoppler-qt5-1_20.09.0-3.1+deb11u1_amd64.debLinux
poppler security update(DSA-5224-1) libpoppler-private-dev_20.09.0-3.1+deb11u1_i386.debLinux
poppler security update(DSA-5224-1) libpoppler-private-dev_20.09.0-3.1+deb11u1_amd64.debLinux
poppler security update(DSA-5224-1) libpoppler-glib8_20.09.0-3.1+deb11u1_i386.debLinux
poppler security update(DSA-5224-1) libpoppler-glib8_20.09.0-3.1+deb11u1_amd64.debLinux
poppler security update(DSA-5224-1) libpoppler-glib-doc_20.09.0-3.1+deb11u1_all.debLinux
poppler security update(DSA-5224-1) libpoppler-glib-dev_20.09.0-3.1+deb11u1_i386.debLinux
poppler security update(DSA-5224-1) libpoppler-glib-dev_20.09.0-3.1+deb11u1_amd64.debLinux
poppler security update(DSA-5224-1) libpoppler-dev_20.09.0-3.1+deb11u1_i386.debLinux
poppler security update(DSA-5224-1) libpoppler-dev_20.09.0-3.1+deb11u1_amd64.debLinux
poppler security update(DSA-5224-1) libpoppler-cpp0v5_20.09.0-3.1+deb11u1_i386.debLinux
poppler security update(DSA-5224-1) libpoppler-cpp0v5_20.09.0-3.1+deb11u1_amd64.debLinux
poppler security update(DSA-5224-1) libpoppler-cpp-dev_20.09.0-3.1+deb11u1_i386.debLinux
poppler security update(DSA-5224-1) libpoppler-cpp-dev_20.09.0-3.1+deb11u1_amd64.debLinux
poppler security update(DSA-5224-1) poppler-utils_20.09.0-3.1+deb11u1_i386.debLinux
poppler security update(DSA-5224-1) poppler-utils_20.09.0-3.1+deb11u1_amd64.debLinux
poppler security update(DSA-5224-1) gir1.2-poppler-0.18_20.09.0-3.1+deb11u1_i386.debLinux
poppler security update(DSA-5224-1) gir1.2-poppler-0.18_20.09.0-3.1+deb11u1_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234