SUSE-SU-2023:3982-1: poppler-qt&distro=SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2023:3982-1 is a vulnerability in poppler-qt&distro=SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 5 · Downstream 0 · Related 5Timeline
- 05-10-2023PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for poppler This update for poppler fixes the following issues: - CVE-2020-23804: Fixed uncontrolled recursion in pdfinfo and pdftops (bsc#1215422). - CVE-2020-36024: Fixed NULL Pointer Deference in `FoFiType1C:convertToType1` (bsc#1214257). - CVE-2022-37050: Fixed denial-of-service via savePageAs in PDFDoc.c (bsc#1214622). - CVE-2022-37051: Fixed abort in main() in pdfunite.cc (bsc#1214621). - CVE-2022-38349: Fixed reachable assertion in Object.h that will lead to denial of service (bsc#1214618).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse6 products
- poppler-qt&distro=SUSE Linux Enterprise Server 12 SP5< 0.43.0-16.35.2
- poppler-qt&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5< 0.43.0-16.35.2
- poppler-qt&distro=SUSE Linux Enterprise Software Development Kit 12 SP5< 0.43.0-16.35.2
- poppler&distro=SUSE Linux Enterprise Server 12 SP5< 0.43.0-16.35.2
- poppler&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5< 0.43.0-16.35.2
1 vendor · 6 products