poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade poppler | Jul 30, 2024 | May 30, 2017 |
| Gentoo Linux | — | Upgrade app-text/poppler. | Jan 18, 2018 | May 30, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade popplerUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler-qt | Dec 4, 2019 | May 30, 2017 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | May 30, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 23, 2017 |
| Suse | — | Upgrade poppler-toolsUpgrade libpoppler-glib8Upgrade libpoppler73Upgrade libpoppler-qt4-develUpgrade libpoppler89Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-cpp0Upgrade libpoppler-develUpgrade libpoppler60Upgrade libpoppler-qt5-1Upgrade libpoppler-qt4-4Upgrade libpoppler-glib-devel | Jul 28, 2017 | May 30, 2017 |
| Ubuntu | — | Upgrade libpoppler44Upgrade libpoppler58Upgrade libpoppler-cpp0Upgrade libpoppler64Upgrade libpoppler61Upgrade libpoppler-cpp0v5Upgrade poppler-utilsUpgrade libpoppler-glib8Upgrade libpoppler-qt5-1Upgrade libpoppler-qt4-4 | Jul 7, 2017 | May 30, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub