CVE-2022-37051: Medium severity Freedesktop poppler vulnerability
An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of service because the main function in pdfunite.cc lacks a stream check before saving an embedded file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/popplerto a version that resolves this vulnerability.Fixed in 22.08.0-2 - Upgrade
Upgrade
ubuntu/popplerto a version that resolves this vulnerability.Fixed in 0.62.0-2ubuntu2.14+ - Upgrade
Upgrade
ubuntu/popplerto a version that resolves this vulnerability.Fixed in 0.86.1-0ubuntu1.4 - Upgrade
Upgrade
ubuntu/popplerto a version that resolves this vulnerability.Fixed in 22.02.0-2ubuntu0.3 - Upgrade
Upgrade
ubuntu/popplerto a version that resolves this vulnerability.Fixed in 0.41.0-0ubuntu1.16+ - Upgrade
Upgrade
debian/popplerto a version that resolves this vulnerability.Fixed in 22.12.0-2+deb12u2Fixed in 22.12.0-2+deb12u3Fixed in 25.03.0-5+deb13u4Fixed in 25.03.0-5+deb13u3Fixed in 26.07.0-3 - Upgrade
Upgrade
debian/popplerto a version that resolves this vulnerability.Fixed in 22.08.0-2
Event History
Frequently Asked Questions
What is CVE-2022-37051?
CVE-2022-37051 is a vulnerability in Poppler 22.07.0 that allows for denial of service due to a reachable abort in the main function of pdfunite.cc.
How severe is CVE-2022-37051?
CVE-2022-37051 has a severity of 6.5 (medium).
How does CVE-2022-37051 affect Poppler 22.07.0?
CVE-2022-37051 affects Poppler 22.07.0 by causing denial of service through a reachable abort in the main function of pdfunite.cc.
How can I fix the vulnerability CVE-2022-37051?
To fix CVE-2022-37051, it is recommended to update to a version of Poppler that includes the patch provided by the upstream vendor.
Where can I find more information about CVE-2022-37051?
More information about CVE-2022-37051 can be found in the references provided: [Reference 1](https://gitlab.freedesktop.org/poppler/poppler/-/commit/4631115647c1e4f0482ffe0491c2f38d2231337b) [Reference 2](https://gitlab.freedesktop.org/poppler/poppler/-/issues/1276)