Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-38349

Fixed in a distro release EPSS 1%

An issue was discovered in Poppler 22.08.0. There is a reachable assertion in Object.h, will lead to denial of service because PDFDoc::replacePageDict in PDFDoc.cc lacks a stream check before saving an embedded file.

Published 2023-08-22 · CVE record · OSV

Products: freedesktop poppler

Distro releases

ReleasePackageFixed in
Amazon Linux 2poppler0.26.5-43.amzn2.1.5
Amazon Linux 2poppler-cpp0.26.5-43.amzn2.1.5
Amazon Linux 2poppler-cpp-devel0.26.5-43.amzn2.1.5
Amazon Linux 2poppler-demos0.26.5-43.amzn2.1.5
Amazon Linux 2poppler-devel0.26.5-43.amzn2.1.5
Amazon Linux 2poppler-glib0.26.5-43.amzn2.1.5
Amazon Linux 2poppler-glib-devel0.26.5-43.amzn2.1.5
Amazon Linux 2poppler-qt0.26.5-43.amzn2.1.5
Amazon Linux 2poppler-qt-devel0.26.5-43.amzn2.1.5
Amazon Linux 2poppler-utils0.26.5-43.amzn2.1.5
Amazon Linux 2023poppler22.08.0-3.amzn2023.0.3
Amazon Linux 2023poppler-cpp22.08.0-3.amzn2023.0.3
Amazon Linux 2023poppler-cpp-devel22.08.0-3.amzn2023.0.3
Amazon Linux 2023poppler-devel22.08.0-3.amzn2023.0.3
Amazon Linux 2023poppler-glib22.08.0-3.amzn2023.0.3
Amazon Linux 2023poppler-glib-devel22.08.0-3.amzn2023.0.3
Amazon Linux 2023poppler-glib-doc22.08.0-3.amzn2023.0.3
Amazon Linux 2023poppler-utils22.08.0-3.amzn2023.0.3
Debian 11poppler20.09.0-3.1+deb11u2
Debian 12poppler22.12.0-2
Debian 13poppler22.12.0-2
Debian 14poppler22.12.0-2
SUSE Enterprise Storage 7.1poppler0.79.0-150200.3.21.2
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSpoppler0.62.0-150000.4.25.2
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSpoppler0.79.0-150200.3.21.2
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSpoppler0.79.0-150200.3.21.2
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSpoppler0.79.0-150200.3.21.2
SUSE Linux Enterprise Module for Basesystem 15 SP4poppler22.01.0-150400.3.11.2
SUSE Linux Enterprise Module for Basesystem 15 SP4poppler0.79.0-150200.3.21.2
SUSE Linux Enterprise Module for Basesystem 15 SP5poppler0.79.0-150200.3.21.2
SUSE Linux Enterprise Module for Package Hub 15 SP4poppler22.01.0-150400.3.11.2
SUSE Linux Enterprise Module for Package Hub 15 SP4poppler-qt522.01.0-150400.3.11.2
SUSE Linux Enterprise Server 12 SP5poppler0.43.0-16.35.2
SUSE Linux Enterprise Server 12 SP5poppler-qt0.43.0-16.35.2
SUSE Linux Enterprise Server 15 SP1-LTSSpoppler0.62.0-150000.4.25.2
SUSE Linux Enterprise Server 15 SP2-LTSSpoppler0.79.0-150200.3.21.2
SUSE Linux Enterprise Server 15 SP3-LTSSpoppler0.79.0-150200.3.21.2
SUSE Linux Enterprise Server for SAP Applications 12 SP5poppler0.43.0-16.35.2
SUSE Linux Enterprise Server for SAP Applications 12 SP5poppler-qt0.43.0-16.35.2
SUSE Linux Enterprise Server for SAP Applications 15 SP1poppler0.62.0-150000.4.25.2
SUSE Linux Enterprise Server for SAP Applications 15 SP2poppler0.79.0-150200.3.21.2
SUSE Linux Enterprise Server for SAP Applications 15 SP3poppler0.79.0-150200.3.21.2
SUSE Linux Enterprise Software Development Kit 12 SP5poppler0.24.4-14.36.2
SUSE Linux Enterprise Software Development Kit 12 SP5poppler0.43.0-16.35.2
SUSE Linux Enterprise Software Development Kit 12 SP5poppler-qt0.43.0-16.35.2
SUSE Linux Enterprise Workstation Extension 15 SP5poppler22.01.0-150400.3.11.2
SUSE Manager Proxy 4.2poppler0.79.0-150200.3.21.2
SUSE Manager Server 4.2poppler0.79.0-150200.3.21.2
Ubuntu 20.04 LTSpoppler0.86.1-0ubuntu1.4
Ubuntu 22.04 LTSpoppler22.02.0-2ubuntu0.3
Ubuntu Pro 16.04 LTSpoppler0.41.0-0ubuntu1.16+esm4
Ubuntu Pro 18.04 LTSpoppler0.62.0-2ubuntu2.14+esm2
openSUSE Leap 15.4poppler0.79.0-150200.3.21.2
openSUSE Leap 15.4poppler0.62.0-150000.4.25.2
openSUSE Leap 15.4poppler22.01.0-150400.3.11.2
openSUSE Leap 15.4poppler-qt522.01.0-150400.3.11.2
openSUSE Leap 15.4poppler-qt622.01.0-150400.3.11.2