A vulnerability in Outline.cc for Poppler prior to 23.06.0 allows a remote attacker to cause a Denial of Service (DoS) (crash) via a crafted PDF file in OutlineItem::open.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade poppler | Mar 21, 2024 | Jul 31, 2023 |
| Amazon_linux_2023 | — | Upgrade poppler-glib-docUpgrade poppler-glib-debuginfoUpgrade popplerUpgrade poppler-utilsUpgrade poppler-utils-debuginfoUpgrade poppler-cppUpgrade poppler-cpp-develUpgrade poppler-debugsourceUpgrade poppler-glibUpgrade poppler-glib-develUpgrade poppler-debuginfoUpgrade poppler-cpp-debuginfoUpgrade poppler-devel | Feb 17, 2025 | Jul 31, 2023 |
| Debian | — | Upgrade poppler | May 15, 2025 | Jul 31, 2023 |
| Suse | — | Upgrade libpoppler-qt5-1Upgrade libpoppler-qt6-develUpgrade libpoppler-cpp0Upgrade libpoppler117Upgrade libpoppler-qt5-develUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-cpp0-32bitUpgrade poppler-toolsUpgrade libpoppler-glib8Upgrade libpoppler117-32bitUpgrade libpoppler-glib-develUpgrade libpoppler-qt5-1-32bitUpgrade libpoppler126-32bitUpgrade libpoppler-qt6-3Upgrade libpoppler-glib8-32bitUpgrade libpoppler126Upgrade libpoppler-devel | Nov 1, 2023 | Jul 31, 2023 |
| Ubuntu | — | Upgrade libpoppler126Upgrade libpoppler118 | Aug 4, 2023 | Jul 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub