USN-6508-1: poppler vulnerabilities
It was discovered that poppler incorrectly handled certain malformed PDF files. If a user or an automated system were tricked into opening a specially crafted PDF file, a remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-23804) It was discovered that poppler incorrectly handled certain malformed PDF files. If a user or an automated system were tricked into opening a specially crafted PDF file, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2022-37050, CVE-2022-37051, CVE-2022-37052, CVE-2022-38349)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for the poppler vulnerabilities in Ubuntu 16.04 LTS?
The vulnerability ID for the poppler vulnerabilities in Ubuntu 16.04 LTS is CVE-2022-37051.
How can a remote attacker exploit the poppler vulnerabilities?
A remote attacker can exploit the poppler vulnerabilities by tricking a user or an automated system into opening a specially crafted PDF file.
What is the severity of the poppler vulnerabilities?
The severity of the poppler vulnerabilities is not mentioned in the provided information.
How do I fix the poppler vulnerabilities in Ubuntu 16.04 LTS?
To fix the poppler vulnerabilities in Ubuntu 16.04 LTS, update the libpoppler118 and poppler-utils packages to version 22.02.0-2ubuntu0.3 or later.
Where can I find more information about the poppler vulnerabilities?
You can find more information about the poppler vulnerabilities on the Ubuntu security website.