CVE-2022-37052: Medium severity poppler data vulnerability
Published Aug 22, 2023
·Updated
A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of service due to a failure in markObject.
Affected Software
7 affected componentsFixes available
ubuntu/poppler<22.08.0-2
22.08.0-2
ubuntu/poppler<0.62.0-2ubuntu2.14+
0.62.0-2ubuntu2.14+
ubuntu/poppler<0.86.1-0ubuntu1.4
0.86.1-0ubuntu1.4
ubuntu/poppler<22.02.0-2ubuntu0.3
22.02.0-2ubuntu0.3
ubuntu/poppler<0.41.0-0ubuntu1.16+
0.41.0-0ubuntu1.16+
debian/poppler<=0.71.0-5, <=0.71.0-5+deb10u3, <=20.09.0-3.1+deb11u1
22.12.0-2
Freedesktop poppler=22.07.0
Remediation
Event History
Aug 22, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:16 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jan 12, 2024
Data Sourced
via Launchpad·12:11 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-37052.
2
What is the severity of CVE-2022-37052?
The severity of CVE-2022-37052 is medium.
3
What is the affected software?
The affected software is Poppler version 22.07.0.
4
How can attackers exploit CVE-2022-37052?
Attackers can exploit CVE-2022-37052 to cause a denial of service.
5
Is there a fix available for CVE-2022-37052?
Yes, a fix is available for CVE-2022-37052. It is recommended to update to the latest version of Poppler.