A vulnerability in Outline.cc for Poppler prior to 23.06.0 allows a remote attacker to cause a Denial of Service (DoS) (crash) via a crafted PDF file in OutlineItem::open.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade poppler | Mar 21, 2024 | Jul 31, 2023 |
| Amazon_linux_2023 | — | Upgrade poppler-cppUpgrade poppler-cpp-develUpgrade poppler-glib-debuginfoUpgrade popplerUpgrade poppler-debugsourceUpgrade poppler-glib-develUpgrade poppler-utils-debuginfoUpgrade poppler-utilsUpgrade poppler-glibUpgrade poppler-glib-docUpgrade poppler-debuginfoUpgrade poppler-develUpgrade poppler-cpp-debuginfo | Feb 17, 2025 | Jul 31, 2023 |
| Debian | — | Upgrade poppler | May 15, 2025 | Jul 31, 2023 |
| Suse | — | Upgrade libpoppler-glib8Upgrade libpoppler-develUpgrade libpoppler-glib8-32bitUpgrade libpoppler-qt5-1-32bitUpgrade poppler-toolsUpgrade libpoppler126-32bitUpgrade libpoppler117-32bitUpgrade libpoppler126Upgrade libpoppler-qt6-3Upgrade libpoppler-glib-develUpgrade libpoppler-qt5-develUpgrade libpoppler-qt5-1Upgrade libpoppler-cpp0-32bitUpgrade libpoppler-cpp0Upgrade libpoppler117Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-qt6-devel | Nov 1, 2023 | Jul 31, 2023 |
| Ubuntu | — | Upgrade libpoppler118Upgrade libpoppler126 | Aug 4, 2023 | Jul 31, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub