Every CVE Search/ Get API key

CVE-2022-27337

A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial...

6.5 MediumFix available

A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.60%Up 0.7 points since May 6, 2022
90%50%10%1%

What each source reports

NVD Score used 6.5

A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.

Record
CVE-2022-27337
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.

Record
CVE-2022-27337
Updated
2026-11-02
EUVDEUVD-2022-31841 No score

A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.

Record
EUVD-2022-31841
Updated
2026-11-03
GitHub AdvisoriesGHSA-c4v5-29v5-3282 6.5

A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial...

A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.

Record
GHSA-c4v5-29v5-3282
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2022-27337 6.5

CVE-2022-27337 does not affect BellSoft software

Record
BELL-CVE-2022-27337
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2022-27337 6.5

A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.

Record
DEBIAN-CVE-2022-27337
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-03
Show 17 moreShow less
OSVOESA-2023-1183 6.5

poppler security update

is a PDF rendering library.

Security Fix(es):

A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.(CVE-2022-27337)

Record
OESA-2023-1183
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:7594 6.5

Red Hat Security Advisory: poppler security and bug fix update

Record
RHSA-2022:7594
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:8151 6.5

Red Hat Security Advisory: poppler security and bug fix update

Record
RHSA-2022:8151
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2022:7594 6.5

Moderate: poppler security and bug fix update

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

  • poppler: A logic error in the Hints::Hints function can cause denial of service (CVE-2022-27337)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.

Record
RLSA-2022:7594
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2022:8151 6.5

Moderate: poppler security and bug fix update

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

  • poppler: A logic error in the Hints::Hints function can cause denial of service (CVE-2022-27337)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.

Record
RLSA-2022:8151
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-27337 6.5

A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.

Record
UBUNTU-CVE-2022-27337
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2022:7594 No score

Moderate: poppler security and bug fix update

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

  • poppler: A logic error in the Hints::Hints function can cause denial of service (CVE-2022-27337)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2022:7594
Updated
2026-11-02
OSVALSA-2022:8151 No score

Moderate: poppler security and bug fix update

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

  • poppler: A logic error in the Hints::Hints function can cause denial of service (CVE-2022-27337)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2022:8151
Updated
2026-11-02
OSV No score

A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.

Record
CVE-2022-27337
Updated
2026-11-02
OSVMGASA-2022-0282 No score

Updated poppler packages fix security vulnerability

A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file. (CVE-2022-27337)

Record
MGASA-2022-0282
Updated
2026-11-02
OSVSUSE-SU-2023:2838-1 No score

Security update for poppler

This update for poppler fixes the following issues:

  • CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service (bsc#1199272).
  • CVE-2018-21009: Fixed integer overflow in Parser:makeStream in Parser.cc (bsc#1149635).
  • CVE-2019-12293: Fixed heap-based buffer over-read in JPXStream:init in JPEG2000Stream.cc (bsc#1136105).
Record
SUSE-SU-2023:2838-1
Updated
2026-11-02
OSVSUSE-SU-2023:2906-1 No score

Security update for poppler

This update for poppler fixes the following issues:

  • CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service (bsc#1199272).
  • CVE-2018-21009: Fixed integer overflow in Parser:makeStream in Parser.cc (bsc#1149635).
  • CVE-2018-20481: Fixed memory leak in GfxColorSpace:setDisplayProfile in GfxState.cc (bsc#1114966).
  • CVE-2019-7310: Fixed a heap-based buffer over-read allows remote attackers to cause DOS via a special crafted PDF (bsc#1124150).
  • CVE-2018-13988: Fixed buffer overflow in pdfunite (bsc#1102531).
  • CVE-2018-16646: Fixed infinite recursion in poppler/Parser.cc:Parser::getObj() function (bsc#1107597).
  • CVE-2018-19058: Fixed reachable abort in Object.h leading to denial of service (bsc#1115187).
  • CVE-2018-19059: Fixed out-of-bounds read in EmbFile:save2 in FileSpec.cc leading to denial of service (bsc#1115186).
  • CVE-2018-19060: Fixed NULL pointer dereference in goo/GooString.h leading to denial of service (bsc#1115185).
  • CVE-2018-19149: Fixed NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment (bsc#1115626).
  • CVE-2017-18267: Fixed denial of service (infinite recursion) via a crafted PDF file (bsc#1092945).
  • CVE-2018-20650: Fixed issue where a reachable Object in dictLookup assertion allows attackers to cause DOS (bsc#1120939).
Record
SUSE-SU-2023:2906-1
Updated
2026-11-02
OSVSUSE-SU-2023:2907-1 No score

Security update for poppler

This update for poppler fixes the following issues:

  • CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service (bsc#1199272).
  • CVE-2018-21009: Fixed integer overflow in Parser:makeStream in Parser.cc (bsc#1149635).
  • CVE-2019-12293: Fixed heap-based buffer over-read in JPXStream:init in JPEG2000Stream.cc (bsc#1136105).
  • CVE-2018-20481: Fixed memory leak in GfxColorSpace:setDisplayProfile in GfxState.cc (bsc#1114966).
  • CVE-2019-7310: Fixed a heap-based buffer over-read allows remote attackers to cause DOS via a special crafted PDF (bsc#1124150).
  • CVE-2018-13988: Fixed buffer overflow in pdfunite (bsc#1102531).
  • CVE-2018-16646: Fixed infinite recursion in poppler/Parser.cc:Parser::getObj() function (bsc#1107597).
  • CVE-2018-19058: Fixed reachable abort in Object.h leading to denial of service (bsc#1115187).
  • CVE-2018-19059: Fixed out-of-bounds read in EmbFile:save2 in FileSpec.cc leading to denial of service (bsc#1115186).
  • CVE-2018-19060: Fixed NULL pointer dereference in goo/GooString.h leading to denial of service (bsc#1115185).
  • CVE-2018-19149: Fixed NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment (bsc#1115626).
  • CVE-2017-18267: Fixed denial of service (infinite recursion) via a crafted PDF file (bsc#1092945).
  • CVE-2018-20650: Fixed issue where a reachable Object in dictLookup assertion allows attackers to cause DOS (bsc#1120939).
Record
SUSE-SU-2023:2907-1
Updated
2026-11-02
OSVSUSE-SU-2023:2941-1 No score

Security update for poppler

This update for poppler fixes the following issues:

  • CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service (bsc#1199272).
Record
SUSE-SU-2023:2941-1
Updated
2026-11-02
OSVSUSE-SU-2023:3168-1 No score

Security update for poppler

This update for poppler fixes the following issues:

  • CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service (bsc#1199272).
Record
SUSE-SU-2023:3168-1
Updated
2026-11-02
OSVUSN-6273-1 No score

poppler vulnerabilities

Jieyong Ma discovered that poppler incorrectly handled certain malformed PDF files. A remote attacker could possibly use this issue to cause poppler to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-27337)

It was discovered that poppler incorrectly handled certain malformed PDF files. A remote attacker could possibly use this issue to cause poppler to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS and Ubuntu 23.04. (CVE-2023-34872)

Record
USN-6273-1
Updated
2026-11-02
OSVUSN-7687-1 No score

poppler vulnerabilities

Jieyong Ma discovered that poppler incorrectly handled certain malformed PDF files. A remote attacker could possibly use this issue to cause poppler to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2022-27337)

Kevin Backhouse discovered that poppler incorrectly handled documents with a large number of annotations. If a user or automated system were tricked into opening a specially crafted document, a remote attacker could use this issue to cause poppler to consume resources, leading to a denial of service, or possibly execute arbitrary code. (CVE-2025-52886)

Record
USN-7687-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
poppler
AlmaLinux:8
 before 20.11.0-5.el8
20.11.0-5.el8
poppler-cpp
AlmaLinux:8
 before 20.11.0-5.el8
20.11.0-5.el8
poppler-cpp-devel
AlmaLinux:8
 before 20.11.0-5.el8
20.11.0-5.el8
poppler-devel
AlmaLinux:8
 before 20.11.0-5.el8
20.11.0-5.el8
poppler-glib
AlmaLinux:8
 before 20.11.0-5.el8
20.11.0-5.el8
poppler-glib-devel
AlmaLinux:8
 before 20.11.0-5.el8
20.11.0-5.el8
poppler-qt5
AlmaLinux:8
 before 20.11.0-5.el8
20.11.0-5.el8
poppler-qt5-devel
AlmaLinux:8
 before 20.11.0-5.el8
20.11.0-5.el8
poppler-utils
AlmaLinux:8
 before 20.11.0-5.el8
20.11.0-5.el8
poppler
AlmaLinux:9
 before 21.01.0-13.el9
21.01.0-13.el9
Show 92 moreShow less
Affected packages
PackageAffectedFixed
poppler-cpp
AlmaLinux:9
 before 21.01.0-13.el9
21.01.0-13.el9
poppler-cpp-devel
AlmaLinux:9
 before 21.01.0-13.el9
21.01.0-13.el9
poppler-devel
AlmaLinux:9
 before 21.01.0-13.el9
21.01.0-13.el9
poppler-glib
AlmaLinux:9
 before 21.01.0-13.el9
21.01.0-13.el9
poppler-glib-devel
AlmaLinux:9
 before 21.01.0-13.el9
21.01.0-13.el9
poppler-qt5
AlmaLinux:9
 before 21.01.0-13.el9
21.01.0-13.el9
poppler-qt5-devel
AlmaLinux:9
 before 21.01.0-13.el9
21.01.0-13.el9
poppler-utils
AlmaLinux:9
 before 21.01.0-13.el9
21.01.0-13.el9
poppler
Debian:12
 before 22.08.0-2
22.08.0-2
poppler
Debian:13
 before 22.08.0-2
22.08.0-2
poppler
Debian:14
 before 22.08.0-2
22.08.0-2
poppler
Debian:10
From an advisory covering 9 CVEs
 before 0.71.0-5+deb10u1, plus listed versions
0.71.0-5
0.71.0-5+deb10u1
poppler
Debian:11
From an advisory covering 2 CVEs
 before 20.09.0-3.1+deb11u1, plus listed versions
20.09.0-3.1
20.09.0-3.1+deb11u1
poppler
Mageia:8
 before 20.12.1-1.1.mga8
20.12.1-1.1.mga8
poppler
openEuler:20.03-LTS-SP1
 before 0.90.0-2.oe1
0.90.0-2.oe1
poppler
openEuler:20.03-LTS-SP3
 before 0.90.0-2.oe1
0.90.0-2.oe1
poppler
openEuler:22.03-LTS
 before 0.90.0-4.oe2203sp1
0.90.0-4.oe2203sp1
poppler
openEuler:22.03-LTS-SP1
 before 0.90.0-4.oe2203sp1
0.90.0-4.oe2203sp1
poppler
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-5.el8
0:20.11.0-5.el8
poppler-cpp-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-5.el8
0:20.11.0-5.el8
poppler-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-5.el8
0:20.11.0-5.el8
poppler-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-5.el8
0:20.11.0-5.el8
poppler-glib
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-5.el8
0:20.11.0-5.el8
poppler-glib-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-5.el8
0:20.11.0-5.el8
poppler-qt5
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-5.el8
0:20.11.0-5.el8
poppler-qt5-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-5.el8
0:20.11.0-5.el8
poppler-utils
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-5.el8
0:20.11.0-5.el8
poppler-utils-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-5.el8
0:20.11.0-5.el8
poppler-cpp
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-5.el8
0:20.11.0-5.el8
poppler-cpp-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-5.el8
0:20.11.0-5.el8
poppler-cpp-devel
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-5.el8
0:20.11.0-5.el8
poppler-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-5.el8
0:20.11.0-5.el8
poppler-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-5.el8
0:20.11.0-5.el8
poppler-devel
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-5.el8
0:20.11.0-5.el8
poppler-glib-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-5.el8
0:20.11.0-5.el8
poppler-glib-devel
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-5.el8
0:20.11.0-5.el8
poppler-qt5-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-5.el8
0:20.11.0-5.el8
poppler-qt5-devel
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-5.el8
0:20.11.0-5.el8
poppler-utils-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-5.el8
0:20.11.0-5.el8
poppler
Red Hat:enterprise_linux:9::appstream
 before 0:21.01.0-13.el9
0:21.01.0-13.el9
poppler-cpp
Red Hat:enterprise_linux:9::appstream
 before 0:21.01.0-13.el9
0:21.01.0-13.el9
poppler-cpp-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:21.01.0-13.el9
0:21.01.0-13.el9
poppler-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:21.01.0-13.el9
0:21.01.0-13.el9
poppler-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:21.01.0-13.el9
0:21.01.0-13.el9
poppler-glib
Red Hat:enterprise_linux:9::appstream
 before 0:21.01.0-13.el9
0:21.01.0-13.el9
poppler-glib-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:21.01.0-13.el9
0:21.01.0-13.el9
poppler-qt5
Red Hat:enterprise_linux:9::appstream
 before 0:21.01.0-13.el9
0:21.01.0-13.el9
poppler-qt5-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:21.01.0-13.el9
0:21.01.0-13.el9
poppler-utils
Red Hat:enterprise_linux:9::appstream
 before 0:21.01.0-13.el9
0:21.01.0-13.el9
poppler-utils-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:21.01.0-13.el9
0:21.01.0-13.el9
poppler-cpp-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:21.01.0-13.el9
0:21.01.0-13.el9
poppler-cpp-devel
Red Hat:enterprise_linux:9::crb
 before 0:21.01.0-13.el9
0:21.01.0-13.el9
poppler-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:21.01.0-13.el9
0:21.01.0-13.el9
poppler-debugsource
Red Hat:enterprise_linux:9::crb
 before 0:21.01.0-13.el9
0:21.01.0-13.el9
poppler-devel
Red Hat:enterprise_linux:9::crb
 before 0:21.01.0-13.el9
0:21.01.0-13.el9
poppler-glib-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:21.01.0-13.el9
0:21.01.0-13.el9
poppler-glib-devel
Red Hat:enterprise_linux:9::crb
 before 0:21.01.0-13.el9
0:21.01.0-13.el9
poppler-qt5-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:21.01.0-13.el9
0:21.01.0-13.el9
poppler-qt5-devel
Red Hat:enterprise_linux:9::crb
 before 0:21.01.0-13.el9
0:21.01.0-13.el9
poppler-utils-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:21.01.0-13.el9
0:21.01.0-13.el9
poppler
Rocky Linux:8
 before 0:20.11.0-5.el8
0:20.11.0-5.el8
poppler
Rocky Linux:9
 before 0:21.01.0-13.el9
0:21.01.0-13.el9
poppler
openSUSE:Leap 15.4
From an advisory covering 3 CVEs
 before 0.62.0-150000.4.15.1
0.62.0-150000.4.15.1
poppler
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 13 CVEs
 before 0.24.4-14.26.1
0.24.4-14.26.1
poppler
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 14 CVEs
 before 0.43.0-16.25.1
0.43.0-16.25.1
poppler-qt
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 14 CVEs
 before 0.43.0-16.25.1
0.43.0-16.25.1
poppler
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 14 CVEs
 before 0.43.0-16.25.1
0.43.0-16.25.1
poppler-qt
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 14 CVEs
 before 0.43.0-16.25.1
0.43.0-16.25.1
poppler
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 14 CVEs
 before 0.43.0-16.25.1
0.43.0-16.25.1
poppler-qt
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 14 CVEs
 before 0.43.0-16.25.1
0.43.0-16.25.1
poppler
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 0.79.0-150200.3.11.1
0.79.0-150200.3.11.1
poppler
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 0.79.0-150200.3.11.1
0.79.0-150200.3.11.1
poppler
SUSE:Linux Enterprise Real Time 15 SP3
 before 0.79.0-150200.3.11.1
0.79.0-150200.3.11.1
poppler
SUSE:Manager Proxy 4.2
 before 0.79.0-150200.3.11.1
0.79.0-150200.3.11.1
poppler
SUSE:Manager Server 4.2
 before 0.79.0-150200.3.11.1
0.79.0-150200.3.11.1
poppler
openSUSE:Leap 15.4
 before 0.79.0-150200.3.11.1
0.79.0-150200.3.11.1
poppler
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 22.01.0-150400.3.6.1
22.01.0-150400.3.6.1
poppler
SUSE:Linux Enterprise Module for Package Hub 15 SP4
 before 22.01.0-150400.3.6.1
22.01.0-150400.3.6.1
poppler-qt5
SUSE:Linux Enterprise Module for Package Hub 15 SP4
 before 22.01.0-150400.3.6.1
22.01.0-150400.3.6.1
poppler
SUSE:Linux Enterprise Workstation Extension 15 SP5
 before 22.01.0-150400.3.6.1
22.01.0-150400.3.6.1
poppler
openSUSE:Leap 15.4
 before 22.01.0-150400.3.6.1
22.01.0-150400.3.6.1
poppler-qt5
openSUSE:Leap 15.4
 before 22.01.0-150400.3.6.1
22.01.0-150400.3.6.1
poppler-qt6
openSUSE:Leap 15.4
 before 22.01.0-150400.3.6.1
22.01.0-150400.3.6.1
poppler
Ubuntu:Pro:16.04:LTS
 before 0.41.0-0ubuntu1.16+esm7, plus listed versions
0.33.0-0ubuntu30.37.0-0ubuntu10.38.0-0ubuntu10.41.0-0ubuntu10.41.0-0ubuntu1.1
Show 21 moreShow less
0.41.0-0ubuntu1.20.41.0-0ubuntu1.30.41.0-0ubuntu1.40.41.0-0ubuntu1.50.41.0-0ubuntu1.60.41.0-0ubuntu1.70.41.0-0ubuntu1.80.41.0-0ubuntu1.90.41.0-0ubuntu1.100.41.0-0ubuntu1.110.41.0-0ubuntu1.120.41.0-0ubuntu1.130.41.0-0ubuntu1.140.41.0-0ubuntu1.150.41.0-0ubuntu1.160.41.0-0ubuntu1.16+esm10.41.0-0ubuntu1.16+esm20.41.0-0ubuntu1.16+esm30.41.0-0ubuntu1.16+esm40.41.0-0ubuntu1.16+esm50.41.0-0ubuntu1.16+esm6
0.41.0-0ubuntu1.16+esm7
poppler
Ubuntu:Pro:18.04:LTS
 before 0.62.0-2ubuntu2.14+esm7, plus listed versions
0.57.0-2ubuntu40.57.0-2ubuntu50.62.0-1ubuntu10.62.0-2ubuntu10.62.0-2ubuntu2
Show 19 moreShow less
0.62.0-2ubuntu2.10.62.0-2ubuntu2.20.62.0-2ubuntu2.40.62.0-2ubuntu2.50.62.0-2ubuntu2.60.62.0-2ubuntu2.70.62.0-2ubuntu2.80.62.0-2ubuntu2.90.62.0-2ubuntu2.100.62.0-2ubuntu2.110.62.0-2ubuntu2.120.62.0-2ubuntu2.130.62.0-2ubuntu2.140.62.0-2ubuntu2.14+esm10.62.0-2ubuntu2.14+esm20.62.0-2ubuntu2.14+esm30.62.0-2ubuntu2.14+esm40.62.0-2ubuntu2.14+esm50.62.0-2ubuntu2.14+esm6
0.62.0-2ubuntu2.14+esm7
poppler
Ubuntu:20.04:LTS
 before 0.86.1-0ubuntu1.2, plus listed versions
0.80.0-0ubuntu10.80.0-0ubuntu30.80.0-0ubuntu40.80.0-0ubuntu50.85.0-1ubuntu10.85.0-1ubuntu30.86.1-0ubuntu10.86.1-0ubuntu1.1
0.86.1-0ubuntu1.2
poppler
Ubuntu:22.04:LTS
 before 22.02.0-2ubuntu0.2, plus listed versions
21.06.1-121.11.0-1~ubuntu222.02.0-222.02.0-2ubuntu0.1
22.02.0-2ubuntu0.2
poppler
Ubuntu:20.04:LTS
From an advisory covering 2 CVEs
 before 0.86.1-0ubuntu1.2, plus listed versions
0.80.0-0ubuntu10.80.0-0ubuntu30.80.0-0ubuntu40.80.0-0ubuntu50.85.0-1ubuntu10.85.0-1ubuntu30.86.1-0ubuntu10.86.1-0ubuntu1.1
0.86.1-0ubuntu1.2
poppler
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 22.02.0-2ubuntu0.2, plus listed versions
21.06.1-121.11.0-1~ubuntu222.02.0-222.02.0-2ubuntu0.1
22.02.0-2ubuntu0.2
poppler
Ubuntu:Pro:16.04:LTS
From an advisory covering 2 CVEs
 before 0.41.0-0ubuntu1.16+esm7, plus listed versions
0.33.0-0ubuntu30.37.0-0ubuntu10.38.0-0ubuntu10.41.0-0ubuntu10.41.0-0ubuntu1.1
Show 21 moreShow less
0.41.0-0ubuntu1.20.41.0-0ubuntu1.30.41.0-0ubuntu1.40.41.0-0ubuntu1.50.41.0-0ubuntu1.60.41.0-0ubuntu1.70.41.0-0ubuntu1.80.41.0-0ubuntu1.90.41.0-0ubuntu1.100.41.0-0ubuntu1.110.41.0-0ubuntu1.120.41.0-0ubuntu1.130.41.0-0ubuntu1.140.41.0-0ubuntu1.150.41.0-0ubuntu1.160.41.0-0ubuntu1.16+esm10.41.0-0ubuntu1.16+esm20.41.0-0ubuntu1.16+esm30.41.0-0ubuntu1.16+esm40.41.0-0ubuntu1.16+esm50.41.0-0ubuntu1.16+esm6
0.41.0-0ubuntu1.16+esm7
poppler
Ubuntu:Pro:18.04:LTS
From an advisory covering 2 CVEs
 before 0.62.0-2ubuntu2.14+esm7, plus listed versions
0.57.0-2ubuntu40.57.0-2ubuntu50.62.0-1ubuntu10.62.0-2ubuntu10.62.0-2ubuntu2
Show 19 moreShow less
0.62.0-2ubuntu2.10.62.0-2ubuntu2.20.62.0-2ubuntu2.40.62.0-2ubuntu2.50.62.0-2ubuntu2.60.62.0-2ubuntu2.70.62.0-2ubuntu2.80.62.0-2ubuntu2.90.62.0-2ubuntu2.100.62.0-2ubuntu2.110.62.0-2ubuntu2.120.62.0-2ubuntu2.130.62.0-2ubuntu2.140.62.0-2ubuntu2.14+esm10.62.0-2ubuntu2.14+esm20.62.0-2ubuntu2.14+esm30.62.0-2ubuntu2.14+esm40.62.0-2ubuntu2.14+esm50.62.0-2ubuntu2.14+esm6
0.62.0-2ubuntu2.14+esm7
poppler
Ubuntu:Pro:20.04:LTS
From an advisory covering 2 CVEs
 before 0.86.1-0ubuntu1.7+esm1, plus listed versions
0.80.0-0ubuntu10.80.0-0ubuntu30.80.0-0ubuntu40.80.0-0ubuntu50.85.0-1ubuntu1
Show 9 moreShow less
0.85.0-1ubuntu30.86.1-0ubuntu10.86.1-0ubuntu1.10.86.1-0ubuntu1.20.86.1-0ubuntu1.30.86.1-0ubuntu1.40.86.1-0ubuntu1.50.86.1-0ubuntu1.60.86.1-0ubuntu1.7
0.86.1-0ubuntu1.7+esm1

History

History
RecordedChangedSources
affected, factsOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-27337 is a medium vulnerability (CVSS 6.5) in Freedesktop Poppler, published May 5, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.60%, the 75th percentile. Fixed in poppler 20.11.0-5.el8.

References

Show 62 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open