An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade popplerUpgrade poppler-glibUpgrade poppler-glib-develUpgrade poppler-cppUpgrade poppler-utilsUpgrade poppler-qt5Upgrade poppler-develUpgrade poppler-qt5-develUpgrade poppler-cpp-develUpgrade poppler-glib-doc | May 31, 2024 | Aug 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade poppler-cpp-develUpgrade poppler-glib-develUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler-qtUpgrade poppler-cppUpgrade popplerUpgrade poppler-develUpgrade poppler-qt-develUpgrade poppler-debuginfoUpgrade poppler-demos | Oct 6, 2023 | Aug 11, 2023 |
| Amazon_linux | — | Upgrade poppler | Oct 7, 2023 | Aug 11, 2023 |
| Debian | — | Upgrade poppler | Aug 16, 2023 | Aug 11, 2023 |
| Oracle_linux | — | Upgrade poppler-glibUpgrade poppler-cppUpgrade poppler-develUpgrade poppler-glib-develUpgrade poppler-cpp-develUpgrade poppler-qt5-develUpgrade poppler-utilsUpgrade poppler-glib-docUpgrade popplerUpgrade poppler-qt5 | May 28, 2024 | Aug 11, 2023 |
| Redhat_linux | — | Upgrade poppler-debuginfoUpgrade poppler-debugsourceUpgrade poppler-qt5-develUpgrade poppler-qt5Upgrade poppler-glibUpgrade poppler-glib-debuginfoUpgrade poppler-cpp-debuginfoNo solution existsUpgrade poppler-utils-debuginfoUpgrade poppler-develUpgrade popplerUpgrade poppler-cpp-develUpgrade poppler-glib-docUpgrade poppler-qt5-debuginfoUpgrade poppler-glib-develUpgrade poppler-utilsUpgrade poppler-cpp | May 23, 2024 | Aug 11, 2023 |
| Rocky_linux | — | Upgrade poppler-debuginfoUpgrade poppler-develUpgrade poppler-qt5Upgrade poppler-utilsUpgrade poppler-qt5-develUpgrade poppler-qt5-debuginfoUpgrade poppler-cpp-develUpgrade poppler-cpp-debuginfoUpgrade poppler-utils-debuginfoUpgrade poppler-cppUpgrade poppler-glibUpgrade poppler-glib-debuginfoUpgrade poppler-glib-develUpgrade popplerUpgrade poppler-debugsource | May 8, 2025 | Aug 11, 2023 |
| Suse | — | Upgrade libpoppler-glib-develUpgrade libpoppler89-32bitUpgrade libpoppler-cpp0Upgrade libpoppler-develUpgrade poppler-toolsUpgrade libpoppler73Upgrade libpoppler60Upgrade libpoppler-qt4-4Upgrade libpoppler73-32bitUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler44Upgrade libpoppler-qt4-develUpgrade libpoppler89Upgrade libpoppler-glib8 | Aug 9, 2024 | Aug 11, 2023 |
| Ubuntu | — | Upgrade libpoppler97Upgrade libpoppler58 (Ubuntu Pro)Upgrade libpoppler73 (Ubuntu Pro) | Aug 18, 2023 | Aug 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub