CVE-2023-34872
Fixed in a distro release EPSS <1%CVSS 5.5
A vulnerability in Outline.cc for Poppler prior to 23.06.0 allows a remote attacker to cause a Denial of Service (DoS) (crash) via a crafted PDF file in OutlineItem::open.
Products: freedesktop poppler
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2023 | poppler | 22.08.0-3.amzn2023.0.4 |
| Amazon Linux 2023 | poppler-cpp | 22.08.0-3.amzn2023.0.4 |
| Amazon Linux 2023 | poppler-cpp-devel | 22.08.0-3.amzn2023.0.4 |
| Amazon Linux 2023 | poppler-devel | 22.08.0-3.amzn2023.0.4 |
| Amazon Linux 2023 | poppler-glib | 22.08.0-3.amzn2023.0.4 |
| Amazon Linux 2023 | poppler-glib-devel | 22.08.0-3.amzn2023.0.4 |
| Amazon Linux 2023 | poppler-glib-doc | 22.08.0-3.amzn2023.0.4 |
| Amazon Linux 2023 | poppler-utils | 22.08.0-3.amzn2023.0.4 |
| Debian 12 | poppler | 22.12.0-2+deb12u1 |
| Debian 13 | poppler | 24.02.0-2 |
| Debian 14 | poppler | 24.02.0-2 |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | poppler | 22.01.0-150400.3.16.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | poppler | 23.01.0-150500.3.5.2 |
| SUSE Linux Enterprise Module for Package Hub 15 SP4 | poppler | 22.01.0-150400.3.16.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP4 | poppler-qt5 | 22.01.0-150400.3.16.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP5 | poppler | 23.01.0-150500.3.5.2 |
| SUSE Linux Enterprise Module for Package Hub 15 SP5 | poppler-qt5 | 23.01.0-150500.3.5.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP5 | poppler | 22.01.0-150400.3.16.1 |
| Ubuntu 20.04 LTS | poppler | 0.86.1-0ubuntu1.2 |
| Ubuntu 22.04 LTS | poppler | 22.02.0-2ubuntu0.2 |
| openSUSE Leap 15.4 | poppler | 22.01.0-150400.3.16.1 |
| openSUSE Leap 15.4 | poppler-qt5 | 22.01.0-150400.3.16.1 |
| openSUSE Leap 15.4 | poppler-qt6 | 22.01.0-150400.3.16.1 |
| openSUSE Leap 15.5 | poppler | 23.01.0-150500.3.5.2 |
| openSUSE Leap 15.5 | poppler-qt5 | 23.01.0-150500.3.5.1 |
| openSUSE Leap 15.5 | poppler-qt6 | 23.01.0-150500.3.5.1 |