A vulnerability in Outline.cc for Poppler prior to 23.06.0 allows a remote attacker to cause a Denial of Service (DoS) (crash) via a crafted PDF file in OutlineItem::open.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade poppler | Mar 21, 2024 | Jul 31, 2023 |
| Amazon_linux_2023 | — | Upgrade poppler-glib-docUpgrade poppler-cppUpgrade poppler-glib-debuginfoUpgrade poppler-utilsUpgrade poppler-utils-debuginfoUpgrade poppler-debugsourceUpgrade popplerUpgrade poppler-glibUpgrade poppler-cpp-develUpgrade poppler-glib-develUpgrade poppler-debuginfoUpgrade poppler-develUpgrade poppler-cpp-debuginfo | Feb 17, 2025 | Jul 31, 2023 |
| Debian | — | Upgrade poppler | May 15, 2025 | Jul 31, 2023 |
| Suse | — | Upgrade libpoppler-glib8Upgrade libpoppler-develUpgrade poppler-toolsUpgrade libpoppler-glib8-32bitUpgrade libpoppler126-32bitUpgrade libpoppler-qt6-3Upgrade libpoppler117-32bitUpgrade libpoppler-qt5-1-32bitUpgrade libpoppler126Upgrade libpoppler-glib-develUpgrade libpoppler-qt5-develUpgrade libpoppler117Upgrade libpoppler-cpp0Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-qt5-1Upgrade libpoppler-qt6-develUpgrade libpoppler-cpp0-32bit | Nov 1, 2023 | Jul 31, 2023 |
| Ubuntu | — | Upgrade libpoppler118Upgrade libpoppler126 | Aug 4, 2023 | Jul 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub