{"id":"CVE-2022-27337","aliases":["ALSA-2022:7594","ALSA-2022:8151","BELL-CVE-2022-27337","DEBIAN-CVE-2022-27337","DLA-3120-1","DSA-5224-1","EUVD-2022-31841","GHSA-c4v5-29v5-3282","MGASA-2022-0282","OESA-2023-1183","RHSA-2022:7594","RHSA-2022:8151","RLSA-2022:7594","RLSA-2022:8151","SUSE-SU-2023:2838-1","SUSE-SU-2023:2906-1","SUSE-SU-2023:2907-1","SUSE-SU-2023:2941-1","SUSE-SU-2023:3168-1","UBUNTU-CVE-2022-27337","USN-6273-1","USN-7687-1"],"status":"published","title":"A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial...","description":"A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.016,"percentile":0.75963,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2022-05-05T18:36:34Z","modified":"2026-11-03T08:02:58Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"poppler","fixed_in":["20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"poppler-cpp","fixed_in":["20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"poppler-cpp-devel","fixed_in":["20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"poppler-devel","fixed_in":["20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"poppler-glib","fixed_in":["20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"poppler-glib-devel","fixed_in":["20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"poppler-qt5","fixed_in":["20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"poppler-qt5-devel","fixed_in":["20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"poppler-utils","fixed_in":["20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"poppler","fixed_in":["21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"poppler-cpp","fixed_in":["21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"poppler-cpp-devel","fixed_in":["21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"poppler-devel","fixed_in":["21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"poppler-glib","fixed_in":["21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"poppler-glib-devel","fixed_in":["21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"poppler-qt5","fixed_in":["21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"poppler-qt5-devel","fixed_in":["21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"poppler-utils","fixed_in":["21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"poppler","fixed_in":["22.08.0-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"poppler","fixed_in":["22.08.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"poppler","fixed_in":["22.08.0-2"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"poppler","fixed_in":["20.12.1-1.1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"poppler","fixed_in":["0.90.0-2.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"poppler","fixed_in":["0.90.0-2.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"poppler","fixed_in":["0.90.0-4.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"poppler","fixed_in":["0.90.0-4.oe2203sp1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler","fixed_in":["0:20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-cpp-debuginfo","fixed_in":["0:20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-debuginfo","fixed_in":["0:20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-debugsource","fixed_in":["0:20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-glib","fixed_in":["0:20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-glib-debuginfo","fixed_in":["0:20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-qt5","fixed_in":["0:20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-qt5-debuginfo","fixed_in":["0:20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-utils","fixed_in":["0:20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-utils-debuginfo","fixed_in":["0:20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-cpp","fixed_in":["0:20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-cpp-debuginfo","fixed_in":["0:20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-cpp-devel","fixed_in":["0:20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-debuginfo","fixed_in":["0:20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-debugsource","fixed_in":["0:20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-devel","fixed_in":["0:20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-glib-debuginfo","fixed_in":["0:20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-glib-devel","fixed_in":["0:20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-qt5-debuginfo","fixed_in":["0:20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-qt5-devel","fixed_in":["0:20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-utils-debuginfo","fixed_in":["0:20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler","fixed_in":["0:21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-cpp","fixed_in":["0:21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-cpp-debuginfo","fixed_in":["0:21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-debuginfo","fixed_in":["0:21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-debugsource","fixed_in":["0:21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-glib","fixed_in":["0:21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-glib-debuginfo","fixed_in":["0:21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-qt5","fixed_in":["0:21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-qt5-debuginfo","fixed_in":["0:21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-utils","fixed_in":["0:21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-utils-debuginfo","fixed_in":["0:21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-cpp-debuginfo","fixed_in":["0:21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-cpp-devel","fixed_in":["0:21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-debuginfo","fixed_in":["0:21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-debugsource","fixed_in":["0:21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-devel","fixed_in":["0:21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-glib-debuginfo","fixed_in":["0:21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-glib-devel","fixed_in":["0:21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-qt5-debuginfo","fixed_in":["0:21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-qt5-devel","fixed_in":["0:21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-utils-debuginfo","fixed_in":["0:21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"poppler","fixed_in":["0:20.11.0-5.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"poppler","fixed_in":["0:21.01.0-13.el9"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"poppler","fixed_in":["0.79.0-150200.3.11.1","22.01.0-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"poppler","fixed_in":["0.79.0-150200.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"poppler","fixed_in":["0.79.0-150200.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"poppler","fixed_in":["0.79.0-150200.3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"poppler","fixed_in":["0.79.0-150200.3.11.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"poppler","fixed_in":["0.79.0-150200.3.11.1","22.01.0-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"poppler","fixed_in":["22.01.0-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"poppler-qt5","fixed_in":["22.01.0-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP5","package":"poppler","fixed_in":["22.01.0-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"poppler-qt5","fixed_in":["22.01.0-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"poppler-qt6","fixed_in":["22.01.0-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"poppler","fixed_in":["0.41.0-0ubuntu1.16+esm7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"poppler","fixed_in":["0.62.0-2ubuntu2.14+esm7"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"poppler","fixed_in":["0.86.1-0ubuntu1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"poppler","fixed_in":["22.02.0-2ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"poppler-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"poppler-cpp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"poppler-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"poppler-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"poppler-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"poppler-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"poppler-qt5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"poppler-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"poppler-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"poppler-cpp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"poppler-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"poppler-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"poppler-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"poppler-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"poppler-qt5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"poppler-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.08.0-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.08.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.08.0-2"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.71.0-5+deb10u1"}]}],"versions":["0.71.0-5"],"bundled":9},{"source":"osv","ecosystem":"Debian:11","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.09.0-3.1+deb11u1"}]}],"versions":["20.09.0-3.1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:8","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.12.1-1.1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.90.0-2.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.90.0-2.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.90.0-4.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.90.0-4.oe2203sp1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-cpp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-qt5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-cpp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-cpp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-qt5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-qt5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-cpp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-qt5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-cpp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-cpp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-qt5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-qt5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-5.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-13.el9"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-150000.4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.24.4-14.26.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.25.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.25.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.25.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.25.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.25.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.25.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.11.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.01.0-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.01.0-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"poppler-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.01.0-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.01.0-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.01.0-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"poppler-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.01.0-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"poppler-qt6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.01.0-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.41.0-0ubuntu1.16+esm7"}]}],"versions":["0.33.0-0ubuntu3","0.37.0-0ubuntu1","0.38.0-0ubuntu1","0.41.0-0ubuntu1","0.41.0-0ubuntu1.1","0.41.0-0ubuntu1.2","0.41.0-0ubuntu1.3","0.41.0-0ubuntu1.4","0.41.0-0ubuntu1.5","0.41.0-0ubuntu1.6","0.41.0-0ubuntu1.7","0.41.0-0ubuntu1.8","0.41.0-0ubuntu1.9","0.41.0-0ubuntu1.10","0.41.0-0ubuntu1.11","0.41.0-0ubuntu1.12","0.41.0-0ubuntu1.13","0.41.0-0ubuntu1.14","0.41.0-0ubuntu1.15","0.41.0-0ubuntu1.16","0.41.0-0ubuntu1.16+esm1","0.41.0-0ubuntu1.16+esm2","0.41.0-0ubuntu1.16+esm3","0.41.0-0ubuntu1.16+esm4","0.41.0-0ubuntu1.16+esm5","0.41.0-0ubuntu1.16+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-2ubuntu2.14+esm7"}]}],"versions":["0.57.0-2ubuntu4","0.57.0-2ubuntu5","0.62.0-1ubuntu1","0.62.0-2ubuntu1","0.62.0-2ubuntu2","0.62.0-2ubuntu2.1","0.62.0-2ubuntu2.2","0.62.0-2ubuntu2.4","0.62.0-2ubuntu2.5","0.62.0-2ubuntu2.6","0.62.0-2ubuntu2.7","0.62.0-2ubuntu2.8","0.62.0-2ubuntu2.9","0.62.0-2ubuntu2.10","0.62.0-2ubuntu2.11","0.62.0-2ubuntu2.12","0.62.0-2ubuntu2.13","0.62.0-2ubuntu2.14","0.62.0-2ubuntu2.14+esm1","0.62.0-2ubuntu2.14+esm2","0.62.0-2ubuntu2.14+esm3","0.62.0-2ubuntu2.14+esm4","0.62.0-2ubuntu2.14+esm5","0.62.0-2ubuntu2.14+esm6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.86.1-0ubuntu1.2"}]}],"versions":["0.80.0-0ubuntu1","0.80.0-0ubuntu3","0.80.0-0ubuntu4","0.80.0-0ubuntu5","0.85.0-1ubuntu1","0.85.0-1ubuntu3","0.86.1-0ubuntu1","0.86.1-0ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.02.0-2ubuntu0.2"}]}],"versions":["21.06.1-1","21.11.0-1~ubuntu2","22.02.0-2","22.02.0-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.86.1-0ubuntu1.2"}]}],"versions":["0.80.0-0ubuntu1","0.80.0-0ubuntu3","0.80.0-0ubuntu4","0.80.0-0ubuntu5","0.85.0-1ubuntu1","0.85.0-1ubuntu3","0.86.1-0ubuntu1","0.86.1-0ubuntu1.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.02.0-2ubuntu0.2"}]}],"versions":["21.06.1-1","21.11.0-1~ubuntu2","22.02.0-2","22.02.0-2ubuntu0.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.41.0-0ubuntu1.16+esm7"}]}],"versions":["0.33.0-0ubuntu3","0.37.0-0ubuntu1","0.38.0-0ubuntu1","0.41.0-0ubuntu1","0.41.0-0ubuntu1.1","0.41.0-0ubuntu1.2","0.41.0-0ubuntu1.3","0.41.0-0ubuntu1.4","0.41.0-0ubuntu1.5","0.41.0-0ubuntu1.6","0.41.0-0ubuntu1.7","0.41.0-0ubuntu1.8","0.41.0-0ubuntu1.9","0.41.0-0ubuntu1.10","0.41.0-0ubuntu1.11","0.41.0-0ubuntu1.12","0.41.0-0ubuntu1.13","0.41.0-0ubuntu1.14","0.41.0-0ubuntu1.15","0.41.0-0ubuntu1.16","0.41.0-0ubuntu1.16+esm1","0.41.0-0ubuntu1.16+esm2","0.41.0-0ubuntu1.16+esm3","0.41.0-0ubuntu1.16+esm4","0.41.0-0ubuntu1.16+esm5","0.41.0-0ubuntu1.16+esm6"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-2ubuntu2.14+esm7"}]}],"versions":["0.57.0-2ubuntu4","0.57.0-2ubuntu5","0.62.0-1ubuntu1","0.62.0-2ubuntu1","0.62.0-2ubuntu2","0.62.0-2ubuntu2.1","0.62.0-2ubuntu2.2","0.62.0-2ubuntu2.4","0.62.0-2ubuntu2.5","0.62.0-2ubuntu2.6","0.62.0-2ubuntu2.7","0.62.0-2ubuntu2.8","0.62.0-2ubuntu2.9","0.62.0-2ubuntu2.10","0.62.0-2ubuntu2.11","0.62.0-2ubuntu2.12","0.62.0-2ubuntu2.13","0.62.0-2ubuntu2.14","0.62.0-2ubuntu2.14+esm1","0.62.0-2ubuntu2.14+esm2","0.62.0-2ubuntu2.14+esm3","0.62.0-2ubuntu2.14+esm4","0.62.0-2ubuntu2.14+esm5","0.62.0-2ubuntu2.14+esm6"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.86.1-0ubuntu1.7+esm1"}]}],"versions":["0.80.0-0ubuntu1","0.80.0-0ubuntu3","0.80.0-0ubuntu4","0.80.0-0ubuntu5","0.85.0-1ubuntu1","0.85.0-1ubuntu3","0.86.1-0ubuntu1","0.86.1-0ubuntu1.1","0.86.1-0ubuntu1.2","0.86.1-0ubuntu1.3","0.86.1-0ubuntu1.4","0.86.1-0ubuntu1.5","0.86.1-0ubuntu1.6","0.86.1-0ubuntu1.7"],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"freedesktop","product":"poppler"}],"references":[{"url":"https://gitlab.freedesktop.org/poppler/poppler/-/issues/1230","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Vendor Advisory","report"]},{"url":"https://gitlab.freedesktop.org/poppler/poppler/-/issues/1230#note_1372177","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Vendor Advisory","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KOTDUXJOKDYO4I7MKHLT5NBGTN5E7FHQ/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","advisory"]},{"url":"https://www.debian.org/security/2022/dsa-5224","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/09/msg00030.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27337","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KOTDUXJOKDYO4I7MKHLT5NBGTN5E7FHQ/"},{"url":"https://github.com/advisories/GHSA-c4v5-29v5-3282"},{"url":"https://access.redhat.com/errata/RHSA-2022:7594","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-27337","tags":["report"]},{"url":"https://bugzilla.redhat.com/2087190","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-7594.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8151","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-8151.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-27337","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/27xxx/CVE-2022-27337.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-27337","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0282.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30690","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/KOTDUXJOKDYO4I7MKHLT5NBGTN5E7FHQ/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1183","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2087190","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2096452","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7594.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-27337","tags":["advisory","report"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2096451","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8151.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7594","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:8151","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232838-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1136105","tags":["report"]},{"url":"https://bugzilla.suse.com/1149635","tags":["report"]},{"url":"https://bugzilla.suse.com/1199272","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-21009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27337","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232906-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1092945","tags":["report"]},{"url":"https://bugzilla.suse.com/1102531","tags":["report"]},{"url":"https://bugzilla.suse.com/1107597","tags":["report"]},{"url":"https://bugzilla.suse.com/1114966","tags":["report"]},{"url":"https://bugzilla.suse.com/1115185","tags":["report"]},{"url":"https://bugzilla.suse.com/1115186","tags":["report"]},{"url":"https://bugzilla.suse.com/1115187","tags":["report"]},{"url":"https://bugzilla.suse.com/1115626","tags":["report"]},{"url":"https://bugzilla.suse.com/1120939","tags":["report"]},{"url":"https://bugzilla.suse.com/1124150","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-13988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7310","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232907-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232941-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233168-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-27337","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6273-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7687-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-34872","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-52886","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-27337","description":"A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.","status":"published","published":"2022-05-05T18:36:34Z","modified":"2024-08-03T05:25:32.656Z","updated_at":"2026-11-02T14:34:33.913527Z"}],"euvd":[{"id":"EUVD-2022-31841","description":"A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.","status":"published","published":"2022-05-05T18:36:34Z","modified":"2024-08-03T05:25:32Z","updated_at":"2026-11-03T03:25:42.938735Z"}],"ghsa":[{"id":"GHSA-c4v5-29v5-3282","title":"A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial...","description":"A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.","status":"published","published":"2022-05-06T00:00:26Z","modified":"2023-02-03T05:01:31Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T14:52:59.998713Z"}],"nvd":[{"id":"CVE-2022-27337","description":"A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.","status":"published","published":"2022-05-05T19:15:07.83Z","modified":"2026-06-17T04:36:55.883Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:07:19.51203Z"}],"osv":[{"id":"BELL-CVE-2022-27337","title":"CVE-2022-27337 does not affect BellSoft software","status":"withdrawn","published":"2022-05-05T19:15:00Z","modified":"2026-01-26T09:45:44.169865Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"DEBIAN-CVE-2022-27337","description":"A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.","status":"published","published":"2022-05-05T19:15:07.83Z","modified":"2026-11-03T08:02:58.549981862Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T08:24:39.643572Z"},{"id":"OESA-2023-1183","title":"poppler security update","description":"is a PDF rendering library.\r\n\r\nSecurity Fix(es):\r\n\r\nA logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.(CVE-2022-27337)","status":"published","published":"2023-03-24T11:05:39Z","modified":"2026-08-18T01:17:37.856396592Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2022:7594","title":"Red Hat Security Advisory: poppler security and bug fix update","status":"published","published":"2024-09-16T08:30:33Z","modified":"2026-06-26T12:22:29.846503972Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:8151","title":"Red Hat Security Advisory: poppler security and bug fix update","status":"published","published":"2024-09-16T08:30:42Z","modified":"2026-06-26T12:21:17.845080007Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RLSA-2022:7594","title":"Moderate: poppler security and bug fix update","description":"Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.\n\nSecurity Fix(es):\n\n* poppler: A logic error in the Hints::Hints function can cause denial of service (CVE-2022-27337)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.","status":"published","published":"2022-11-08T06:23:48Z","modified":"2026-02-04T19:00:06.658302Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:8151","title":"Moderate: poppler security and bug fix update","description":"Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.\n\nSecurity Fix(es):\n\n* poppler: A logic error in the Hints::Hints function can cause denial of service (CVE-2022-27337)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.","status":"published","published":"2022-11-15T06:17:06Z","modified":"2026-02-05T13:30:15.083281Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-27337","description":"A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.","status":"published","published":"2022-05-05T19:15:00Z","modified":"2026-04-22T13:20:17.043142Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"ALSA-2022:7594","title":"Moderate: poppler security and bug fix update","description":"Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.\n\nSecurity Fix(es):\n\n* poppler: A logic error in the Hints::Hints function can cause denial of service (CVE-2022-27337)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-08T00:00:00Z","modified":"2026-10-29T11:01:37.965341183Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:8151","title":"Moderate: poppler security and bug fix update","description":"Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.\n\nSecurity Fix(es):\n\n* poppler: A logic error in the Hints::Hints function can cause denial of service (CVE-2022-27337)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-15T00:00:00Z","modified":"2026-10-29T11:31:19.931135386Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CVE-2022-27337","description":"A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.","status":"published","published":"2022-05-05T18:36:34Z","modified":"2026-10-28T02:30:25.476684116Z","updated_at":"2026-11-02T15:44:24.758293Z"},{"id":"DLA-3120-1","title":"poppler - security update","status":"published","published":"2022-09-26T00:00:00Z","modified":"2026-03-09T01:21:12.352272Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5224-1","title":"poppler - security update","status":"published","published":"2022-09-06T00:00:00Z","modified":"2026-03-09T02:10:11.755918Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2022-0282","title":"Updated poppler packages fix security vulnerability","description":"A logic error in the Hints::Hints function of Poppler v22.03.0 allows\nattackers to cause a Denial of Service (DoS) via a crafted PDF file.\n(CVE-2022-27337)\n","status":"published","published":"2022-08-13T02:32:35Z","modified":"2026-04-16T04:42:07.950391547Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"SUSE-SU-2023:2838-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n  - CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service (bsc#1199272).\n  - CVE-2018-21009: Fixed integer overflow in Parser:makeStream in Parser.cc (bsc#1149635).\n  - CVE-2019-12293: Fixed heap-based buffer over-read in JPXStream:init in JPEG2000Stream.cc (bsc#1136105).\n","status":"published","published":"2023-07-14T19:26:51Z","modified":"2026-02-04T03:43:16.417749Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:2906-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n  - CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service (bsc#1199272).\n  - CVE-2018-21009: Fixed integer overflow in Parser:makeStream in Parser.cc (bsc#1149635).\n  - CVE-2018-20481: Fixed memory leak in GfxColorSpace:setDisplayProfile in GfxState.cc (bsc#1114966).\n  - CVE-2019-7310: Fixed a heap-based buffer over-read allows remote attackers to cause DOS via a special crafted PDF (bsc#1124150).\n  - CVE-2018-13988: Fixed buffer overflow in pdfunite (bsc#1102531).\n  - CVE-2018-16646: Fixed infinite recursion in poppler/Parser.cc:Parser::getObj() function (bsc#1107597).\n  - CVE-2018-19058: Fixed reachable abort in Object.h leading to denial of service (bsc#1115187).\n  - CVE-2018-19059: Fixed out-of-bounds read in EmbFile:save2 in FileSpec.cc leading to denial of service (bsc#1115186).\n  - CVE-2018-19060: Fixed NULL pointer dereference in goo/GooString.h leading to denial of service (bsc#1115185).\n  - CVE-2018-19149: Fixed NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment (bsc#1115626).\n  - CVE-2017-18267: Fixed denial of service (infinite recursion) via a crafted PDF file (bsc#1092945).\n  - CVE-2018-20650: Fixed issue where a reachable Object in dictLookup assertion allows attackers to cause DOS (bsc#1120939).\n\n\n","status":"published","published":"2023-07-20T08:19:44Z","modified":"2026-02-04T04:16:11.424712Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:2907-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n  - CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service (bsc#1199272).\n  - CVE-2018-21009: Fixed integer overflow in Parser:makeStream in Parser.cc (bsc#1149635).\n  - CVE-2019-12293: Fixed heap-based buffer over-read in JPXStream:init in JPEG2000Stream.cc (bsc#1136105).\n  - CVE-2018-20481: Fixed memory leak in GfxColorSpace:setDisplayProfile in GfxState.cc (bsc#1114966).\n  - CVE-2019-7310: Fixed a heap-based buffer over-read allows remote attackers to cause DOS via a special crafted PDF (bsc#1124150).\n  - CVE-2018-13988: Fixed buffer overflow in pdfunite (bsc#1102531).\n  - CVE-2018-16646: Fixed infinite recursion in poppler/Parser.cc:Parser::getObj() function (bsc#1107597).\n  - CVE-2018-19058: Fixed reachable abort in Object.h leading to denial of service (bsc#1115187).\n  - CVE-2018-19059: Fixed out-of-bounds read in EmbFile:save2 in FileSpec.cc leading to denial of service (bsc#1115186).\n  - CVE-2018-19060: Fixed NULL pointer dereference in goo/GooString.h leading to denial of service (bsc#1115185).\n  - CVE-2018-19149: Fixed NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment (bsc#1115626).\n  - CVE-2017-18267: Fixed denial of service (infinite recursion) via a crafted PDF file (bsc#1092945).\n  - CVE-2018-20650: Fixed issue where a reachable Object in dictLookup assertion allows attackers to cause DOS (bsc#1120939).\n\n","status":"published","published":"2023-07-20T08:20:53Z","modified":"2026-02-04T03:21:13.547323Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:2941-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n  - CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service (bsc#1199272).\n  \n","status":"published","published":"2023-07-24T07:02:23Z","modified":"2026-02-04T02:48:29.646827Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:3168-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n  - CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service (bsc#1199272).\n","status":"published","published":"2023-08-02T13:50:24Z","modified":"2026-02-04T03:50:13.576645Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"USN-6273-1","title":"poppler vulnerabilities","description":"Jieyong Ma discovered that poppler incorrectly handled certain malformed\nPDF files. A remote attacker could possibly use this issue to cause poppler\nto crash, resulting in a denial of service. This issue only affected Ubuntu\n20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-27337)\n\nIt was discovered that poppler incorrectly handled certain malformed PDF\nfiles. A remote attacker could possibly use this issue to cause poppler to\ncrash, resulting in a denial of service. This issue only affected Ubuntu\n22.04 LTS and Ubuntu 23.04. (CVE-2023-34872)\n","status":"published","published":"2023-08-03T13:39:24Z","modified":"2026-04-22T10:37:33.465783Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-7687-1","title":"poppler vulnerabilities","description":"Jieyong Ma discovered that poppler incorrectly handled certain malformed\nPDF files. A remote attacker could possibly use this issue to cause poppler\nto crash, resulting in a denial of service. This issue only affected Ubuntu\n16.04 LTS and Ubuntu 18.04 LTS. (CVE-2022-27337)\n\nKevin Backhouse discovered that poppler incorrectly handled documents with\na large number of annotations. If a user or automated system were tricked\ninto opening a specially crafted document, a remote attacker could use\nthis issue to cause poppler to consume resources, leading to a denial of\nservice, or possibly execute arbitrary code. (CVE-2025-52886)","status":"published","published":"2025-08-06T14:06:57Z","modified":"2026-06-25T13:32:30.683893718Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}