{"schemaVersion":3,"id":"SUSE-SU-2023:2906-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for poppler\n\nThis update for poppler fixes the following issues:\n\n  - CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service (bsc#1199272).\n  - CVE-2018-21009: Fixed integer overflow in Parser:makeStream in Parser.cc (bsc#1149635).\n  - CVE-2018-20481: Fixed memory leak in GfxColorSpace:setDisplayProfile in GfxState.cc (bsc#1114966).\n  - CVE-2019-7310: Fixed a heap-based buffer over-read allows remote attackers to cause DOS via a special crafted PDF (bsc#1124150).\n  - CVE-2018-13988: Fixed buffer overflow in pdfunite (bsc#1102531).\n  - CVE-2018-16646: Fixed infinite recursion in poppler/Parser.cc:Parser::getObj() function (bsc#1107597).\n  - CVE-2018-19058: Fixed reachable abort in Object.h leading to denial of service (bsc#1115187).\n  - CVE-2018-19059: Fixed out-of-bounds read in EmbFile:save2 in FileSpec.cc leading to denial of service (bsc#1115186).\n  - CVE-2018-19060: Fixed NULL pointer dereference in goo/GooString.h leading to denial of service (bsc#1115185).\n  - CVE-2018-19149: Fixed NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment (bsc#1115626).\n  - CVE-2017-18267: Fixed denial of service (infinite recursion) via a crafted PDF file (bsc#1092945).\n  - CVE-2018-20650: Fixed issue where a reachable Object in dictLookup assertion allows attackers to cause DOS (bsc#1120939).","dates":{"published":"2023-07-20T08:19:44.000Z","modified":"2026-02-04T04:16:11.424Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"poppler&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","name":"poppler","label":"poppler&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/poppler&distro=SUSE Linux Enterprise Software Development Kit 12 SP5","purlType":"rpm","versions":[{"text":"< 0.24.4-14.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.24.4-14.26.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232906-1/","label":"www.suse.com/support/update/announcement/2023/suse-su-20232906-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1092945","label":"bugzilla.suse.com/1092945","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1102531","label":"bugzilla.suse.com/1102531","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1107597","label":"bugzilla.suse.com/1107597","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1114966","label":"bugzilla.suse.com/1114966","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1115185","label":"bugzilla.suse.com/1115185","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1115186","label":"bugzilla.suse.com/1115186","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1115187","label":"bugzilla.suse.com/1115187","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1115626","label":"bugzilla.suse.com/1115626","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1120939","label":"bugzilla.suse.com/1120939","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1124150","label":"bugzilla.suse.com/1124150","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1149635","label":"bugzilla.suse.com/1149635","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1199272","label":"bugzilla.suse.com/1199272","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18267","label":"www.suse.com/security/cve/CVE-2017-18267","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-13988","label":"www.suse.com/security/cve/CVE-2018-13988","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16646","label":"www.suse.com/security/cve/CVE-2018-16646","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18897","label":"www.suse.com/security/cve/CVE-2018-18897","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19058","label":"www.suse.com/security/cve/CVE-2018-19058","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19059","label":"www.suse.com/security/cve/CVE-2018-19059","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19060","label":"www.suse.com/security/cve/CVE-2018-19060","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19149","label":"www.suse.com/security/cve/CVE-2018-19149","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20481","label":"www.suse.com/security/cve/CVE-2018-20481","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20650","label":"www.suse.com/security/cve/CVE-2018-20650","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-21009","label":"www.suse.com/security/cve/CVE-2018-21009","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7310","label":"www.suse.com/security/cve/CVE-2019-7310","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-27337","label":"www.suse.com/security/cve/CVE-2022-27337","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2017-18267","CVE-2018-13988","CVE-2018-16646","CVE-2018-18897","CVE-2018-19058","CVE-2018-19059","CVE-2018-19060","CVE-2018-19149","CVE-2018-20481","CVE-2018-20650","CVE-2018-21009","CVE-2019-7310","CVE-2022-27337"],"downstream":[],"duplicates":[],"related":["CVE-2017-18267","CVE-2018-13988","CVE-2018-16646","CVE-2018-18897","CVE-2018-19058","CVE-2018-19059","CVE-2018-19060","CVE-2018-19149","CVE-2018-20481","CVE-2018-20650","CVE-2018-21009","CVE-2019-7310","CVE-2022-27337"]},"timeline":[{"kind":"published","date":"2023-07-20T08:19:44.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T04:16:11.424Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T18:59:43.919Z","stale":false,"partial":false}}