A flaw was found in the Poppler's Pdfinfo utility. This issue occurs when using -dests parameter with pdfinfo utility. By using certain malformed input files, an attacker could cause the utility to crash, leading to a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade poppler-cpp-develUpgrade poppler-qt5-develUpgrade poppler-glib-develUpgrade poppler-glibUpgrade poppler-qt5Upgrade poppler-utilsUpgrade poppler-cppUpgrade poppler-develUpgrade popplerUpgrade poppler-glib-doc | Aug 22, 2024 | Jun 21, 2024 |
| Alpine Linux | — | Upgrade poppler-qt5Upgrade poppler-qtUpgrade poppler | Aug 8, 2025 | Jun 21, 2024 |
| Amazon_linux_2023 | — | Upgrade poppler-cppUpgrade poppler-utilsUpgrade poppler-cpp-develUpgrade popplerUpgrade poppler-debuginfoUpgrade poppler-glibUpgrade poppler-utils-debuginfoUpgrade poppler-cpp-debuginfoUpgrade poppler-debugsourceUpgrade poppler-glib-debuginfoUpgrade poppler-glib-docUpgrade poppler-develUpgrade poppler-glib-devel | Feb 17, 2025 | Jun 6, 2024 |
| Debian | — | Upgrade popplerNo solution exists | May 15, 2025 | Jun 21, 2024 |
| Oracle_linux | — | Upgrade poppler-glib-develUpgrade poppler-utilsUpgrade poppler-glib-docUpgrade poppler-glibUpgrade popplerUpgrade poppler-cppUpgrade poppler-cpp-develUpgrade poppler-qt5-develUpgrade poppler-develUpgrade poppler-qt5 | Oct 16, 2024 | Jun 6, 2024 |
| Redhat_linux | — | Upgrade poppler-cpp-develUpgrade poppler-develUpgrade poppler-glib-docUpgrade poppler-utilsUpgrade poppler-cppUpgrade poppler-glib-debuginfoUpgrade poppler-glib-develUpgrade poppler-qt5-debuginfoUpgrade poppler-debuginfoUpgrade poppler-qt5-develUpgrade poppler-cpp-debuginfoUpgrade poppler-glibNo solution existsUpgrade poppler-debugsourceUpgrade popplerUpgrade poppler-utils-debuginfoUpgrade poppler-qt5 | Sep 13, 2024 | Jun 21, 2024 |
| Rocky_linux | — | Upgrade poppler-cpp-develUpgrade poppler-debuginfoUpgrade poppler-glibUpgrade popplerUpgrade poppler-debugsourceUpgrade poppler-glib-develUpgrade poppler-cpp-debuginfoUpgrade poppler-utils-debuginfoUpgrade poppler-cppUpgrade poppler-qt5-debuginfoUpgrade poppler-utilsUpgrade poppler-glib-debuginfoUpgrade poppler-qt5-develUpgrade poppler-qt5Upgrade poppler-devel | Mar 18, 2025 | Jun 21, 2024 |
| Suse | — | Upgrade libpoppler-qt5-1Upgrade libpoppler117Upgrade libpoppler-develUpgrade libpoppler-cpp0Upgrade libpoppler-glib-develUpgrade libpoppler126-32bitUpgrade libpoppler-qt6-3Upgrade libpoppler148Upgrade libpoppler-qt5-1-32bitUpgrade libpoppler-qt6-develUpgrade libpoppler-cpp0-32bitUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-cpp2Upgrade libpoppler89Upgrade poppler-toolsUpgrade libpoppler126Upgrade libpoppler-glib8-32bitUpgrade libpoppler-qt5-develUpgrade libpoppler-glib8 | Jul 9, 2024 | Jun 21, 2024 |
| Ubuntu | — | Upgrade poppler-utilsUpgrade libpoppler134Upgrade libpoppler118 | Jul 25, 2024 | Jun 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub