Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2023-34872
HistoryJul 31, 2023 - 2:15 p.m.

CVE-2023-34872

2023-07-3114:15:10
Alpine Linux Development Team
security.alpinelinux.org
8
poppler
vulnerability
dos
crafted pdf
outlineitem::open
unix
cve-2023-34872

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

53.3%

A vulnerability in Outline.cc for Poppler prior to 23.06.0 allows a remote attacker to cause a Denial of Service (DoS) (crash) via a crafted PDF file in OutlineItem::open.

OSVersionArchitecturePackageVersionFilename
Alpine3.18-mainnoarchpoppler= 23.05.0-r0UNKNOWN
Alpine3.17-mainnoarchpoppler= 22.11.0-r0UNKNOWN
Alpine3.16-mainnoarchpoppler= 22.05.0-r0UNKNOWN
Alpine3.15-mainnoarchpoppler= 21.11.0-r0UNKNOWN

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.002 Low

EPSS

Percentile

53.3%