UbuntuUSN-6508-2poppler regression
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.3 High
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
35.4%
Releases
- Ubuntu 18.04 ESM
Packages
- poppler - PDF rendering library
Details
USN-6508-1 fixed vulnerabilities in poppler. The update introduced
one minor regression in Ubuntu 18.04 LTS. This update fixes the
problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that poppler incorrectly handled certain malformed PDF
files. If a user or an automated system were tricked into opening a
specially crafted PDF file, a remote attacker could possibly use this
issue to cause a denial of service. This issue only affected Ubuntu 16.04
LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-23804)
It was discovered that poppler incorrectly handled certain malformed PDF
files. If a user or an automated system were tricked into opening a
specially crafted PDF file, a remote attacker could possibly use this
issue to cause a denial of service. (CVE-2022-37050, CVE-2022-37051,
CVE-2022-37052, CVE-2022-38349)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 18.04 | noarch | libpoppler73 | < 0.62.0-2ubuntu2.14+esm3 | UNKNOWN |
| Ubuntu | 18.04 | noarch | gir1.2-poppler-0.18 | < 0.62.0-2ubuntu2.14 | UNKNOWN |
| Ubuntu | 18.04 | noarch | libpoppler-cpp-dev | < 0.62.0-2ubuntu2.14 | UNKNOWN |
| Ubuntu | 18.04 | noarch | libpoppler-cpp0v5 | < 0.62.0-2ubuntu2.14 | UNKNOWN |
| Ubuntu | 18.04 | noarch | libpoppler-cpp0v5-dbgsym | < 0.62.0-2ubuntu2.14 | UNKNOWN |
| Ubuntu | 18.04 | noarch | libpoppler-dev | < 0.62.0-2ubuntu2.14 | UNKNOWN |
| Ubuntu | 18.04 | noarch | libpoppler-glib-dev | < 0.62.0-2ubuntu2.14 | UNKNOWN |
| Ubuntu | 18.04 | noarch | libpoppler-glib-doc | < 0.62.0-2ubuntu2.14 | UNKNOWN |
| Ubuntu | 18.04 | noarch | libpoppler-glib8 | < 0.62.0-2ubuntu2.14 | UNKNOWN |
| Ubuntu | 18.04 | noarch | libpoppler-glib8-dbgsym | < 0.62.0-2ubuntu2.14 | UNKNOWN |
References
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.3 High
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
35.4%