{"schemaVersion":3,"id":"CVE-2022-38784","aliases":["MGASA-2022-0386","SUSE-SU-2023:0495-1","SUSE-SU-2023:0677-1","RHSA-2023:2259","RHSA-2023:2810","UBUNTU-CVE-2022-38784","USN-5606-1","DEBIAN-CVE-2022-38784","openSUSE-SU-2024:12362-1"],"status":"published","duplicateOf":null,"title":null,"description":"Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.","dates":{"published":"2022-08-30T02:58:33.566Z","modified":"2024-09-17T03:54:54.096Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":4.6,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":4.6,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":4.6,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00627,"percentile":0.49059,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00627},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00627,"percentile":0.49059}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00627,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00627,"percentile":0.49059}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"GITHUB_ZMANION_VULNERABILITIES","name":"Vulnerabilities","source":"github","url":"https://github.com/zmanion/Vulnerabilities/blob/main/CVE-2022-38171.md","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-190","name":"Integer Overflow or Wraparound","description":"The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/190.html"}],"affected":[{"vendor":"debian","product":"poppler","name":"poppler","label":"poppler","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/poppler","purlType":"deb","versions":[{"text":"< 22.08.0-2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 22.08.0-2.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"emscripten","name":"emscripten","label":"emscripten","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/emscripten","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"poppler","name":"poppler","label":"poppler","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/poppler","purlType":"deb","versions":[{"text":"< 0.41.0-0ubuntu1.16+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 0.62.0-2ubuntu2.13","noFixRecorded":false,"fixedIn":null},{"text":"< 0.41.0-0ubuntu1.16+esm2","noFixRecorded":false,"fixedIn":null},{"text":"< 0.62.0-2ubuntu2.14","noFixRecorded":false,"fixedIn":null},{"text":"< 0.86.1-0ubuntu1.1","noFixRecorded":false,"fixedIn":null},{"text":"< 22.02.0-2ubuntu0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.41.0-0ubuntu1.16+esm1 | < 0.62.0-2ubuntu2.13 | < 0.41.0-0ubuntu1.16+esm2 | < 0.62.0-2ubuntu2.14 | < 0.86.1-0ubuntu1.1 | < 22.02.0-2ubuntu0.1","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"10.0","noFixRecorded":false,"fixedIn":null},{"text":"11.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"10.0 | 11.0","eol":{"isEol":true,"eolDate":"2024-06-30T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"10","label":"10 (Buster)","eolFrom":"2024-06-30T00:00:00.000Z","isLts":false,"isMaintained":true,"latestVersion":"10.13"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"fedoraproject","product":"fedora","name":"fedora","label":"fedora","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"35","noFixRecorded":false,"fixedIn":null},{"text":"36","noFixRecorded":false,"fixedIn":null},{"text":"37","noFixRecorded":false,"fixedIn":null}],"versionsText":"35 | 36 | 37","eol":{"isEol":true,"eolDate":"2022-12-13T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"35","label":"35","eolFrom":"2022-12-13T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"fedora","label":"Fedora Linux","category":"os"}},"hubHref":"/vendor/fedoraproject/fedora"},{"vendor":"freedesktop","product":"poppler","name":"poppler","label":"poppler","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 22.08.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 22.08.0","eol":null,"hubHref":"/vendor/freedesktop/poppler"},{"vendor":"mageia","product":"poppler","name":"poppler","label":"poppler","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/poppler","purlType":"rpm","versions":[{"text":"< 20.12.1-1.2.mga8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 20.12.1-1.2.mga8","eol":null,"hubHref":null},{"vendor":"opensuse","product":"poppler-qt5&distro=openSUSE Leap 15.4","name":"poppler-qt5","label":"poppler-qt5&distro=openSUSE Leap 15.4","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/poppler-qt5&distro=openSUSE Leap 15.4","purlType":"rpm","versions":[{"text":"< 22.01.0-150400.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 22.01.0-150400.3.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"poppler-qt6&distro=openSUSE Leap 15.4","name":"poppler-qt6","label":"poppler-qt6&distro=openSUSE Leap 15.4","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/poppler-qt6&distro=openSUSE Leap 15.4","purlType":"rpm","versions":[{"text":"< 22.01.0-150400.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 22.01.0-150400.3.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"poppler&distro=openSUSE Leap 15.4","name":"poppler","label":"poppler&distro=openSUSE Leap 15.4","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/poppler&distro=openSUSE Leap 15.4","purlType":"rpm","versions":[{"text":"< 22.01.0-150400.3.3.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0.79.0-150200.3.8.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 22.01.0-150400.3.3.1 | < 0.79.0-150200.3.8.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"poppler&distro=openSUSE Tumbleweed","name":"poppler","label":"poppler&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/poppler&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 22.09.0-1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 22.09.0-1.1","eol":null,"hubHref":null},{"vendor":"redhat","product":"poppler","name":"poppler","label":"poppler","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/poppler","purlType":"rpm","versions":[{"text":"< 0:21.01.0-14.el9","noFixRecorded":false,"fixedIn":null},{"text":"< 0:20.11.0-6.el8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:21.01.0-14.el9 | < 0:20.11.0-6.el8","eol":null,"hubHref":null},{"vendor":"redhat","product":"poppler-cpp","name":"poppler-cpp","label":"poppler-cpp","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/poppler-cpp","purlType":"rpm","versions":[{"text":"< 0:21.01.0-14.el9","noFixRecorded":false,"fixedIn":null},{"text":"< 0:20.11.0-6.el8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:21.01.0-14.el9 | < 0:20.11.0-6.el8","eol":null,"hubHref":null},{"vendor":"redhat","product":"poppler-cpp-debuginfo","name":"poppler-cpp-debuginfo","label":"poppler-cpp-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/poppler-cpp-debuginfo","purlType":"rpm","versions":[{"text":"< 0:21.01.0-14.el9","noFixRecorded":false,"fixedIn":null},{"text":"< 0:20.11.0-6.el8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:21.01.0-14.el9 | < 0:20.11.0-6.el8","eol":null,"hubHref":null},{"vendor":"redhat","product":"poppler-cpp-devel","name":"poppler-cpp-devel","label":"poppler-cpp-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/poppler-cpp-devel","purlType":"rpm","versions":[{"text":"< 0:21.01.0-14.el9","noFixRecorded":false,"fixedIn":null},{"text":"< 0:20.11.0-6.el8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:21.01.0-14.el9 | < 0:20.11.0-6.el8","eol":null,"hubHref":null},{"vendor":"redhat","product":"poppler-debuginfo","name":"poppler-debuginfo","label":"poppler-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/poppler-debuginfo","purlType":"rpm","versions":[{"text":"< 0:21.01.0-14.el9","noFixRecorded":false,"fixedIn":null},{"text":"< 0:20.11.0-6.el8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:21.01.0-14.el9 | < 0:20.11.0-6.el8","eol":null,"hubHref":null},{"vendor":"redhat","product":"poppler-debugsource","name":"poppler-debugsource","label":"poppler-debugsource","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/poppler-debugsource","purlType":"rpm","versions":[{"text":"< 0:21.01.0-14.el9","noFixRecorded":false,"fixedIn":null},{"text":"< 0:20.11.0-6.el8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:21.01.0-14.el9 | < 0:20.11.0-6.el8","eol":null,"hubHref":null},{"vendor":"redhat","product":"poppler-devel","name":"poppler-devel","label":"poppler-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/poppler-devel","purlType":"rpm","versions":[{"text":"< 0:21.01.0-14.el9","noFixRecorded":false,"fixedIn":null},{"text":"< 0:20.11.0-6.el8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:21.01.0-14.el9 | < 0:20.11.0-6.el8","eol":null,"hubHref":null},{"vendor":"redhat","product":"poppler-glib","name":"poppler-glib","label":"poppler-glib","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/poppler-glib","purlType":"rpm","versions":[{"text":"< 0:21.01.0-14.el9","noFixRecorded":false,"fixedIn":null},{"text":"< 0:20.11.0-6.el8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:21.01.0-14.el9 | < 0:20.11.0-6.el8","eol":null,"hubHref":null},{"vendor":"redhat","product":"poppler-glib-debuginfo","name":"poppler-glib-debuginfo","label":"poppler-glib-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/poppler-glib-debuginfo","purlType":"rpm","versions":[{"text":"< 0:21.01.0-14.el9","noFixRecorded":false,"fixedIn":null},{"text":"< 0:20.11.0-6.el8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:21.01.0-14.el9 | < 0:20.11.0-6.el8","eol":null,"hubHref":null},{"vendor":"redhat","product":"poppler-glib-devel","name":"poppler-glib-devel","label":"poppler-glib-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/poppler-glib-devel","purlType":"rpm","versions":[{"text":"< 0:21.01.0-14.el9","noFixRecorded":false,"fixedIn":null},{"text":"< 0:20.11.0-6.el8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:21.01.0-14.el9 | < 0:20.11.0-6.el8","eol":null,"hubHref":null},{"vendor":"redhat","product":"poppler-qt5","name":"poppler-qt5","label":"poppler-qt5","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/poppler-qt5","purlType":"rpm","versions":[{"text":"< 0:21.01.0-14.el9","noFixRecorded":false,"fixedIn":null},{"text":"< 0:20.11.0-6.el8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:21.01.0-14.el9 | < 0:20.11.0-6.el8","eol":null,"hubHref":null},{"vendor":"redhat","product":"poppler-qt5-debuginfo","name":"poppler-qt5-debuginfo","label":"poppler-qt5-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/poppler-qt5-debuginfo","purlType":"rpm","versions":[{"text":"< 0:21.01.0-14.el9","noFixRecorded":false,"fixedIn":null},{"text":"< 0:20.11.0-6.el8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:21.01.0-14.el9 | < 0:20.11.0-6.el8","eol":null,"hubHref":null},{"vendor":"redhat","product":"poppler-qt5-devel","name":"poppler-qt5-devel","label":"poppler-qt5-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/poppler-qt5-devel","purlType":"rpm","versions":[{"text":"< 0:21.01.0-14.el9","noFixRecorded":false,"fixedIn":null},{"text":"< 0:20.11.0-6.el8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:21.01.0-14.el9 | < 0:20.11.0-6.el8","eol":null,"hubHref":null},{"vendor":"redhat","product":"poppler-utils","name":"poppler-utils","label":"poppler-utils","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/poppler-utils","purlType":"rpm","versions":[{"text":"< 0:21.01.0-14.el9","noFixRecorded":false,"fixedIn":null},{"text":"< 0:20.11.0-6.el8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:21.01.0-14.el9 | < 0:20.11.0-6.el8","eol":null,"hubHref":null},{"vendor":"redhat","product":"poppler-utils-debuginfo","name":"poppler-utils-debuginfo","label":"poppler-utils-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/poppler-utils-debuginfo","purlType":"rpm","versions":[{"text":"< 0:21.01.0-14.el9","noFixRecorded":false,"fixedIn":null},{"text":"< 0:20.11.0-6.el8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:21.01.0-14.el9 | < 0:20.11.0-6.el8","eol":null,"hubHref":null},{"vendor":"suse","product":"poppler-qt5&distro=SUSE Linux Enterprise Module for Package Hub 15 SP4","name":"poppler-qt5","label":"poppler-qt5&distro=SUSE Linux Enterprise Module for Package Hub 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/poppler-qt5&distro=SUSE Linux Enterprise Module for Package Hub 15 SP4","purlType":"rpm","versions":[{"text":"< 22.01.0-150400.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 22.01.0-150400.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"poppler&distro=SUSE Enterprise Storage 7","name":"poppler","label":"poppler&distro=SUSE Enterprise Storage 7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/poppler&distro=SUSE Enterprise Storage 7","purlType":"rpm","versions":[{"text":"< 0.79.0-150200.3.8.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.79.0-150200.3.8.1","eol":null,"hubHref":null},{"vendor":"suse","product":"poppler&distro=SUSE Enterprise Storage 7.1","name":"poppler","label":"poppler&distro=SUSE Enterprise Storage 7.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/poppler&distro=SUSE Enterprise Storage 7.1","purlType":"rpm","versions":[{"text":"< 0.79.0-150200.3.8.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.79.0-150200.3.8.1","eol":null,"hubHref":null},{"vendor":"suse","product":"poppler&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","name":"poppler","label":"poppler&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/poppler&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 0.79.0-150200.3.8.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.79.0-150200.3.8.1","eol":null,"hubHref":null},{"vendor":"suse","product":"poppler&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS","name":"poppler","label":"poppler&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/poppler&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS","purlType":"rpm","versions":[{"text":"< 0.79.0-150200.3.8.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.79.0-150200.3.8.1","eol":null,"hubHref":null},{"vendor":"suse","product":"poppler&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","name":"poppler","label":"poppler&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/poppler&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","purlType":"rpm","versions":[{"text":"< 0.79.0-150200.3.8.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.79.0-150200.3.8.1","eol":null,"hubHref":null},{"vendor":"suse","product":"poppler&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4","name":"poppler","label":"poppler&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/poppler&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4","purlType":"rpm","versions":[{"text":"< 22.01.0-150400.3.3.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0.79.0-150200.3.8.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 22.01.0-150400.3.3.1 | < 0.79.0-150200.3.8.1","eol":null,"hubHref":null},{"vendor":"suse","product":"poppler&distro=SUSE Linux Enterprise Module for Package Hub 15 SP4","name":"poppler","label":"poppler&distro=SUSE Linux Enterprise Module for Package Hub 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/poppler&distro=SUSE Linux Enterprise Module for Package Hub 15 SP4","purlType":"rpm","versions":[{"text":"< 22.01.0-150400.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 22.01.0-150400.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"poppler&distro=SUSE Linux Enterprise Real Time 15 SP3","name":"poppler","label":"poppler&distro=SUSE Linux Enterprise Real Time 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/poppler&distro=SUSE Linux Enterprise Real Time 15 SP3","purlType":"rpm","versions":[{"text":"< 0.79.0-150200.3.8.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.79.0-150200.3.8.1","eol":null,"hubHref":null},{"vendor":"suse","product":"poppler&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","name":"poppler","label":"poppler&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/poppler&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 0.79.0-150200.3.8.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.79.0-150200.3.8.1","eol":null,"hubHref":null},{"vendor":"suse","product":"poppler&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","name":"poppler","label":"poppler&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/poppler&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","purlType":"rpm","versions":[{"text":"< 0.79.0-150200.3.8.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.79.0-150200.3.8.1","eol":null,"hubHref":null},{"vendor":"suse","product":"poppler&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","name":"poppler","label":"poppler&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/poppler&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","purlType":"rpm","versions":[{"text":"< 0.79.0-150200.3.8.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.79.0-150200.3.8.1","eol":null,"hubHref":null},{"vendor":"suse","product":"poppler&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","name":"poppler","label":"poppler&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/poppler&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","purlType":"rpm","versions":[{"text":"< 0.79.0-150200.3.8.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.79.0-150200.3.8.1","eol":null,"hubHref":null},{"vendor":"suse","product":"poppler&distro=SUSE Manager Proxy 4.2","name":"poppler","label":"poppler&distro=SUSE Manager Proxy 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/poppler&distro=SUSE Manager Proxy 4.2","purlType":"rpm","versions":[{"text":"< 0.79.0-150200.3.8.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.79.0-150200.3.8.1","eol":null,"hubHref":null},{"vendor":"suse","product":"poppler&distro=SUSE Manager Server 4.2","name":"poppler","label":"poppler&distro=SUSE Manager Server 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/poppler&distro=SUSE Manager Server 4.2","purlType":"rpm","versions":[{"text":"< 0.79.0-150200.3.8.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.79.0-150200.3.8.1","eol":null,"hubHref":null}],"affectedCount":41,"eol":{"hasEol":true,"count":2},"references":[{"url":"https://github.com/jeffssh/CVE-2021-30860","label":"github.com/jeffssh/CVE-2021-30860","hostname":"github.com","tags":["REPORT","Third Party Advisory"]},{"url":"https://poppler.freedesktop.org/releases.html","label":"poppler.freedesktop.org/releases.html","hostname":"poppler.freedesktop.org","tags":["REPORT","Release Notes","Vendor Advisory"]},{"url":"https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/1261/diffs?commit_id=27354e9d9696ee2bc063910a6c9a6b27c5184a52","label":"gitlab.freedesktop.org/poppler/…","hostname":"gitlab.freedesktop.org","tags":["REPORT","Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/09/02/11","label":"www.openwall.com/lists/oss-security/2022/09/02/11","hostname":"www.openwall.com","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.debian.org/security/2022/dsa-5224","label":"www.debian.org/security/2022/dsa-5224","hostname":"www.debian.org","tags":["Vendor Advisory","WEB","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TQAO6O2XHPQHNW2MWOCJJ4C3YWS2VV4K/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J546EJUKUOPWA3JSLP7DYNBAU3YGNCCW/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/09/msg00030.html","label":"lists.debian.org/debian-lts-announce/2022/09/msg00030.html","hostname":"lists.debian.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202209-21","label":"security.gentoo.org/glsa/202209-21","hostname":"security.gentoo.org","tags":["Vendor Advisory","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BGY72LBJMFAKQWC2XH4MRPIGPQLXTFL6/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NLKN3HJKZSGEEKOF57DM7Q3IB74HP5VW/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory"]},{"url":"https://github.com/zmanion/Vulnerabilities/blob/main/CVE-2022-38171.md","label":"github.com/zmanion/Vulnerabilities/blob/main/CVE-2022-38171.md","hostname":"github.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38171","label":"www.cve.org/CVERecord?id=CVE-2022-38171","hostname":"www.cve.org","tags":["Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E5Z2677EQUWVHJLGSH5DQX53EK6MY2M2/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0386.html","label":"advisories.mageia.org/MGASA-2022-0386.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30805","label":"bugs.mageia.org/show_bug.cgi?id=30805","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://www.openwall.com/lists/oss-security/2022/09/02/11","label":"www.openwall.com/lists/oss-security/2022/09/02/11","hostname":"www.openwall.com","tags":["WEB","ARTICLE"]},{"url":"https://ubuntu.com/security/notices/USN-5606-1","label":"ubuntu.com/security/notices/USN-5606-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5606-2","label":"ubuntu.com/security/notices/USN-5606-2","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/TQAO6O2XHPQHNW2MWOCJJ4C3YWS2VV4K/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB"]},{"url":"https://www.debian.org/lts/security/2022/dla-3120","label":"www.debian.org/lts/security/2022/dla-3120","hostname":"www.debian.org","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230495-1/","label":"www.suse.com/support/update/announcement/2023/suse-su-20230495-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1202692","label":"bugzilla.suse.com/1202692","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38784","label":"www.suse.com/security/cve/CVE-2022-38784","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230677-1/","label":"www.suse.com/support/update/announcement/2023/suse-su-20230677-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1181551","label":"bugzilla.suse.com/1181551","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://access.redhat.com/errata/RHSA-2023:2259","label":"access.redhat.com/errata/RHSA-2023:2259","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index","label":"access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124527","label":"bugzilla.redhat.com/show_bug.cgi?id=2124527","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2144768","label":"bugzilla.redhat.com/show_bug.cgi?id=2144768","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2259.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2259.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-38784","label":"access.redhat.com/security/cve/CVE-2022-38784","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38784","label":"www.cve.org/CVERecord?id=CVE-2022-38784","hostname":"www.cve.org","tags":["Advisory","REPORT"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38784","label":"nvd.nist.gov/vuln/detail/CVE-2022-38784","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:2810","label":"access.redhat.com/errata/RHSA-2023:2810","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.8_release_notes/index","label":"access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.8_release_notes/index","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2810.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2810.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-38784","label":"ubuntu.com/security/CVE-2022-38784","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://gist.github.com/zmanion/b2ed0d1a0cec163ecd07d5e3d9740dc6","label":"gist.github.com/zmanion/b2ed0d1a0cec163ecd07d5e3d9740dc6","hostname":"gist.github.com","tags":["REPORT"]},{"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38171","label":"cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38171","hostname":"cve.mitre.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-38784","label":"security-tracker.debian.org/tracker/CVE-2022-38784","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DLA-3120-1","DSA-5224-1","SUSE-SU-2023:0480-1","SUSE-SU-2023:0494-1"],"duplicates":[],"related":["SUSE-SU-2023:0480-1","SUSE-SU-2023:0494-1","USN-5606-2"]},"timeline":[{"kind":"published","date":"2022-08-30T02:58:33.566Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-09-17T03:54:54.096Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":41,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T04:58:06.721Z","stale":false,"partial":false}}