A flaw was found in the Poppler's Pdfinfo utility. This issue occurs when using -dests parameter with pdfinfo utility. By using certain malformed input files, an attacker could cause the utility to crash, leading to a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade poppler-qt5-develUpgrade poppler-glib-develUpgrade poppler-qt5Upgrade poppler-cpp-develUpgrade poppler-glibUpgrade poppler-glib-docUpgrade poppler-cppUpgrade poppler-utilsUpgrade popplerUpgrade poppler-devel | Aug 22, 2024 | Jun 21, 2024 |
| Alpine Linux | — | Upgrade poppler-qtUpgrade popplerUpgrade poppler-qt5 | Aug 8, 2025 | Jun 21, 2024 |
| Amazon_linux_2023 | — | Upgrade poppler-utilsUpgrade poppler-cppUpgrade poppler-debuginfoUpgrade popplerUpgrade poppler-glibUpgrade poppler-cpp-develUpgrade poppler-glib-develUpgrade poppler-debugsourceUpgrade poppler-develUpgrade poppler-utils-debuginfoUpgrade poppler-cpp-debuginfoUpgrade poppler-glib-debuginfoUpgrade poppler-glib-doc | Feb 17, 2025 | Jun 6, 2024 |
| Debian | — | Upgrade popplerNo solution exists | May 15, 2025 | Jun 21, 2024 |
| Oracle_linux | — | Upgrade poppler-cppUpgrade poppler-cpp-develUpgrade poppler-glibUpgrade poppler-glib-docUpgrade poppler-glib-develUpgrade poppler-utilsUpgrade popplerUpgrade poppler-develUpgrade poppler-qt5Upgrade poppler-qt5-devel | Oct 16, 2024 | Jun 6, 2024 |
| Redhat_linux | — | Upgrade poppler-cpp-develUpgrade poppler-cppUpgrade poppler-develUpgrade poppler-glib-develUpgrade poppler-utilsUpgrade poppler-glib-docUpgrade poppler-qt5-debuginfoUpgrade poppler-glib-debuginfoUpgrade poppler-cpp-debuginfoUpgrade poppler-glibUpgrade poppler-utils-debuginfoUpgrade poppler-debugsourceUpgrade poppler-qt5Upgrade popplerNo solution existsUpgrade poppler-debuginfoUpgrade poppler-qt5-devel | Sep 13, 2024 | Jun 21, 2024 |
| Rocky_linux | — | Upgrade poppler-qt5-debuginfoUpgrade poppler-qt5Upgrade poppler-cpp-debuginfoUpgrade poppler-utils-debuginfoUpgrade poppler-glib-debuginfoUpgrade poppler-qt5-develUpgrade poppler-develUpgrade poppler-utilsUpgrade poppler-cppUpgrade popplerUpgrade poppler-glib-develUpgrade poppler-glibUpgrade poppler-debugsourceUpgrade poppler-cpp-develUpgrade poppler-debuginfo | Mar 18, 2025 | Jun 21, 2024 |
| Suse | — | Upgrade libpoppler-cpp0Upgrade libpoppler117Upgrade libpoppler-cpp2Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-qt6-3Upgrade libpoppler-cpp0-32bitUpgrade libpoppler-glib-develUpgrade libpoppler148Upgrade libpoppler-qt6-develUpgrade libpoppler126-32bitUpgrade libpoppler-qt5-1Upgrade libpoppler-develUpgrade libpoppler-qt5-1-32bitUpgrade libpoppler89Upgrade libpoppler-glib8Upgrade libpoppler-qt5-develUpgrade poppler-toolsUpgrade libpoppler126Upgrade libpoppler-glib8-32bit | Jul 9, 2024 | Jun 21, 2024 |
| Ubuntu | — | Upgrade libpoppler118Upgrade poppler-utilsUpgrade libpoppler134 | Jul 25, 2024 | Jun 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub