Ubuntu.comUB:CVE-2022-37050CVE-2022-37050
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.0005 Low
EPSS
Percentile
16.5%
In Poppler 22.07.0, PDFDoc::savePageAs in PDFDoc.c callows attackers to
cause a denial-of-service (application crashes with SIGABRT) by crafting a
PDF file in which the xref data structure is mishandled in getCatalog
processing. Note that this vulnerability is caused by the incomplete patch
of CVE-2018-20662.
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | poppler | < 0.62.0-2ubuntu2.14+esm2) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
| ubuntu | 20.04 | noarch | poppler | < 0.86.1-0ubuntu1.4 | UNKNOWN |
| ubuntu | 22.04 | noarch | poppler | < 22.02.0-2ubuntu0.3 | UNKNOWN |
| ubuntu | 16.04 | noarch | poppler | < 0.41.0-0ubuntu1.16+esm4) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
Related
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.0005 Low
EPSS
Percentile
16.5%