SUSE-SU-2023:3998-1: poppler&distro=openSUSE Leap 15.4
Vulnerability summary
SUSE-SU-2023:3998-1 is a vulnerability in poppler&distro=openSUSE Leap 15.4 with no CVSS score yet.
Advisory lineage
Upstream 5 · Downstream 0 · Related 5Timeline
- 06-10-2023PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for poppler This update for poppler fixes the following issues: - CVE-2020-23804: Fixed uncontrolled recursion in pdfinfo and pdftops (bsc#1215422). - CVE-2020-36024: Fixed NULL Pointer Deference in `FoFiType1C:convertToType1` (bsc#1214257). - CVE-2022-37050: Fixed denial-of-service via savePageAs in PDFDoc.c (bsc#1214622). - CVE-2022-37051: Fixed abort in main() in pdfunite.cc (bsc#1214621). - CVE-2022-38349: Fixed reachable assertion in Object.h that will lead to denial of service (bsc#1214618).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse12 products
- poppler&distro=SUSE Enterprise Storage 7.1< 0.79.0-150200.3.21.2
- poppler&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS< 0.79.0-150200.3.21.2
- poppler&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS< 0.79.0-150200.3.21.2
- poppler&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS< 0.79.0-150200.3.21.2
- poppler&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4< 0.79.0-150200.3.21.2
Opensuse1 product
- poppler&distro=openSUSE Leap 15.4< 0.79.0-150200.3.21.2
2 vendors · 13 products