In Poppler 22.07.0, PDFDoc::savePageAs in PDFDoc.c callows attackers to cause a denial-of-service (application crashes with SIGABRT) by crafting a PDF file in which the xref data structure is mishandled in getCatalog processing. Note that this vulnerability is caused by the incomplete patch of CVE-2018-20662.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade poppler-qt-develUpgrade poppler-debuginfoUpgrade poppler-develUpgrade poppler-glib-develUpgrade poppler-qtUpgrade poppler-cppUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler-demosUpgrade poppler-cpp-develUpgrade poppler | Sep 8, 2023 | Aug 22, 2023 |
| Amazon_linux | — | Upgrade poppler | Sep 11, 2023 | Aug 22, 2023 |
| Debian | — | Upgrade poppler | Oct 17, 2023 | Aug 22, 2023 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 22, 2023 |
| Suse | — | Upgrade libpoppler44Upgrade libpoppler-qt5-develUpgrade libpoppler-qt6-develUpgrade libpoppler-qt5-1Upgrade poppler-toolsUpgrade libpoppler73-32bitUpgrade libpoppler-cpp0-32bitUpgrade libpoppler-qt4-develUpgrade libpoppler89-32bitUpgrade libpoppler-glib8-32bitUpgrade libpoppler73Upgrade libpoppler89Upgrade libpoppler-glib-develUpgrade libpoppler60Upgrade libpoppler-qt4-4Upgrade libpoppler117-32bitUpgrade libpoppler-qt5-1-32bitUpgrade libpoppler-glib8Upgrade libpoppler-develUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-qt6-3Upgrade libpoppler117Upgrade libpoppler-cpp0 | Oct 4, 2023 | Aug 22, 2023 |
| Ubuntu | — | Upgrade libpoppler97Upgrade poppler-utilsUpgrade libpoppler73 (Ubuntu Pro)Upgrade poppler-utils (Ubuntu Pro)Upgrade libpoppler118Upgrade libpoppler58 (Ubuntu Pro) | Nov 24, 2023 | Aug 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub