A flaw was found in the Poppler's Pdfinfo utility. This issue occurs when using -dests parameter with pdfinfo utility. By using certain malformed input files, an attacker could cause the utility to crash, leading to a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-poppleralma-upgrade-poppler-cppalma-upgrade-poppler-cpp-develalma-upgrade-poppler-develalma-upgrade-poppler-glibalma-upgrade-poppler-glib-develalma-upgrade-poppler-glib-docalma-upgrade-poppler-qt5alma-upgrade-poppler-qt5-develalma-upgrade-poppler-utils | Aug 22, 2024 | Jun 21, 2024 | |
| Alpine Linux | alpine-linux-upgrade-poppleralpine-linux-upgrade-poppler-qt5alpine-linux-upgrade-poppler-qt | Aug 8, 2025 | Jun 21, 2024 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-poppleramazon-linux-2023-upgrade-poppler-cppamazon-linux-2023-upgrade-poppler-cpp-debuginfoamazon-linux-2023-upgrade-poppler-cpp-develamazon-linux-2023-upgrade-poppler-debuginfoamazon-linux-2023-upgrade-poppler-debugsourceamazon-linux-2023-upgrade-poppler-develamazon-linux-2023-upgrade-poppler-glibamazon-linux-2023-upgrade-poppler-glib-debuginfoamazon-linux-2023-upgrade-poppler-glib-develamazon-linux-2023-upgrade-poppler-glib-docamazon-linux-2023-upgrade-poppler-utilsamazon-linux-2023-upgrade-poppler-utils-debuginfo | Feb 17, 2025 | Jun 6, 2024 | |
| Debian | no-fix-debian-deb-package | May 15, 2025 | Jun 21, 2024 | |
| Oracle_linux | — | oracle-linux-upgrade-poppleroracle-linux-upgrade-poppler-cpporacle-linux-upgrade-poppler-cpp-develoracle-linux-upgrade-poppler-develoracle-linux-upgrade-poppler-gliboracle-linux-upgrade-poppler-glib-develoracle-linux-upgrade-poppler-glib-docoracle-linux-upgrade-poppler-qt5oracle-linux-upgrade-poppler-qt5-develoracle-linux-upgrade-poppler-utils | Oct 16, 2024 | Jun 6, 2024 |
| Redhat_linux | redhat-upgrade-popplerredhat-upgrade-poppler-cppredhat-upgrade-poppler-cpp-debuginforedhat-upgrade-poppler-cpp-develredhat-upgrade-poppler-debuginforedhat-upgrade-poppler-debugsourceredhat-upgrade-poppler-develredhat-upgrade-poppler-glibredhat-upgrade-poppler-glib-debuginforedhat-upgrade-poppler-glib-develredhat-upgrade-poppler-glib-docredhat-upgrade-poppler-qt5redhat-upgrade-poppler-qt5-debuginforedhat-upgrade-poppler-qt5-develredhat-upgrade-poppler-utilsredhat-upgrade-poppler-utils-debuginfo | Sep 13, 2024 | Jun 21, 2024 | |
| Rocky_linux | rocky-upgrade-popplerrocky-upgrade-poppler-cpprocky-upgrade-poppler-cpp-debuginforocky-upgrade-poppler-cpp-develrocky-upgrade-poppler-debuginforocky-upgrade-poppler-debugsourcerocky-upgrade-poppler-develrocky-upgrade-poppler-glibrocky-upgrade-poppler-glib-debuginforocky-upgrade-poppler-glib-develrocky-upgrade-poppler-qt5rocky-upgrade-poppler-qt5-debuginforocky-upgrade-poppler-qt5-develrocky-upgrade-poppler-utilsrocky-upgrade-poppler-utils-debuginfo | Mar 18, 2025 | Jun 21, 2024 | |
| Suse | — | suse-upgrade-libpoppler-cpp0suse-upgrade-libpoppler-cpp0-32bitsuse-upgrade-libpoppler-cpp2suse-upgrade-libpoppler-develsuse-upgrade-libpoppler-glib-develsuse-upgrade-libpoppler-glib8suse-upgrade-libpoppler-glib8-32bitsuse-upgrade-libpoppler-qt5-1suse-upgrade-libpoppler-qt5-1-32bitsuse-upgrade-libpoppler-qt5-develsuse-upgrade-libpoppler-qt6-3suse-upgrade-libpoppler-qt6-develsuse-upgrade-libpoppler117suse-upgrade-libpoppler126suse-upgrade-libpoppler126-32bitsuse-upgrade-libpoppler148suse-upgrade-libpoppler89suse-upgrade-poppler-toolssuse-upgrade-typelib-1_0-poppler-0_18 | Jul 9, 2024 | Jun 21, 2024 |
| Ubuntu | ubuntu-upgrade-libpoppler118ubuntu-upgrade-libpoppler134ubuntu-upgrade-poppler-utils | Jul 25, 2024 | Jun 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub