An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of service because the main function in pdfunite.cc lacks a stream check before saving an embedded file.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1781191047 advisory.

  - In Poppler 22.07.0, PDFDoc::savePageAs in PDFDoc.c callows attackers to cause a denial-of-service     (application crashes with SIGABRT) by crafting a PDF file in which the xref data structure is mishandled     in getCatalog processing. Note that this vulnerability is caused by the incomplete patch of     CVE-2018-20662. (CVE-2022-37050)

  - An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of service     because the main function in pdfunite.cc lacks a stream check before saving an embedded file.
    (CVE-2022-37051)

  - A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of service     due to a failure in markObject. (CVE-2022-37052)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002396 advisory.

    An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of service     because the main function in pdfunite.cc lacks a stream check before saving an embedded file.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4141 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4141-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Adrian Bunk     April 28, 2025                                https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : poppler     Version        : 20.09.0-3.1+deb11u2     CVE ID         : CVE-2020-36023 CVE-2020-36024 CVE-2022-37050 CVE-2022-37051                      CVE-2022-37052 CVE-2022-38349 CVE-2024-56378 CVE-2025-32364                      CVE-2025-32365     Debian Bug     : 1091322 1102190 1102191

    Multiple vulnerabilities have been fixed in the PDF rendering     library poppler.

    CVE-2020-36023

        Infinite loop in FoFiType1C::cvtGlyph

    CVE-2020-36024

        NULL dereference in FoFiType1C::convertToType1

    CVE-2022-37050

        Crash in PDFDoc::savePageAs

    CVE-2022-37051

        Crash in the pdfunite tool

    CVE-2022-37052

        Reachable assert on XRef::add failure

    CVE-2022-38349

        pdfunite crash on broken files

    CVE-2024-56378

        Out-of-bounds read in JBIG2Bitmap::combine

    CVE-2025-32364

        Floating point exception in PSStack::roll

    CVE-2025-32365

        Out-of-bounds read in JBIG2:Bitmap::combine

    For Debian 11 bullseye, these problems have been fixed in version     20.09.0-3.1+deb11u2.

    We recommend that you upgrade your poppler packages.

    For the detailed security status of poppler please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/poppler

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in Poppler 22.07.0. There is a reachable abort which leads to denial of service     because the main function in pdfunite.cc lacks a stream check before saving an embedded file.
    (CVE-2022-37051)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6508-1 advisory.

    It was discovered that poppler incorrectly handled certain malformed PDF files. If a user or an automated     system were tricked into opening a specially crafted PDF file, a remote attacker could possibly use this     issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu     20.04 LTS. (CVE-2020-23804)

    It was discovered that poppler incorrectly handled certain malformed PDF files. If a user or an automated     system were tricked into opening a specially crafted PDF file, a remote attacker could possibly use this     issue to cause a denial of service. (CVE-2022-37050, CVE-2022-37051, CVE-2022-37052, CVE-2022-38349)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3620 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3620-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Adrian Bunk     October 16, 2023                              https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : poppler     Version        : 0.71.0-5+deb10u3     CVE ID         : CVE-2020-23804 CVE-2022-37050 CVE-2022-37051

    Several vulnerabilities have been fixed in poppler,     a PDF rendering library.

    CVE-2020-23804

        Stack overflow in XRef::readXRefTable()

    CVE-2022-37050

        Crash in PDFDoc::savePageAs()

    CVE-2022-37051

        Crash in the pdfunite tool

    For Debian 10 buster, these problems have been fixed in version     0.71.0-5+deb10u3.

    We recommend that you upgrade your poppler packages.

    For the detailed security status of poppler please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/poppler

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3998-1 advisory.

    - CVE-2020-23804: Fixed uncontrolled recursion in pdfinfo and pdftops (bsc#1215422).
    - CVE-2020-36024: Fixed NULL Pointer Deference in `FoFiType1C:convertToType1` (bsc#1214257).
    - CVE-2022-37050: Fixed denial-of-service via savePageAs in PDFDoc.c (bsc#1214622).
    - CVE-2022-37051: Fixed abort in main() in pdfunite.cc (bsc#1214621).
    - CVE-2022-38349: Fixed reachable assertion in Object.h that will lead to denial of service (bsc#1214618).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3983-1 advisory.

    - CVE-2020-23804: Fixed uncontrolled recursion in pdfinfo and pdftops (bsc#1215422).
    - CVE-2020-36024: Fixed NULL Pointer Deference in `FoFiType1C:convertToType1` (bsc#1214257).
    - CVE-2022-37050: Fixed denial-of-service via savePageAs in PDFDoc.c (bsc#1214622).
    - CVE-2022-37051: Fixed abort in main() in pdfunite.cc (bsc#1214621).
    - CVE-2022-38349: Fixed reachable assertion in Object.h that will lead to denial of service (bsc#1214618).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3982-1 advisory.

    - CVE-2020-23804: Fixed uncontrolled recursion in pdfinfo and pdftops (bsc#1215422).
    - CVE-2020-36024: Fixed NULL Pointer Deference in `FoFiType1C:convertToType1` (bsc#1214257).
    - CVE-2022-37050: Fixed denial-of-service via savePageAs in PDFDoc.c (bsc#1214622).
    - CVE-2022-37051: Fixed abort in main() in pdfunite.cc (bsc#1214621).
    - CVE-2022-38349: Fixed reachable assertion in Object.h that will lead to denial of service (bsc#1214618).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3947-1 advisory.

    - CVE-2022-37050: Fixed denial-of-service via savePageAs in PDFDoc.c (bsc#1214622).
    - CVE-2022-37051: Fixed abort in main() in pdfunite.cc (bsc#1214621).
    - CVE-2022-38349: Fixed reachable assertion in Object.h that will lead to denial of service (bsc#1214618).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
352397	AlmaLinux 9.2 [TuxCare] Security Update: poppler / poppler-cpp / poppler-cpp-devel / poppler-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1781191047)	Nessus	Alma Linux Local Security Checks	Local	medium
345511	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: poppler (UTSA-2023-002396)	Nessus	Unity Linux Local Security Checks	Local	medium
236774	Debian dla-4141 : gir1.2-poppler-0.18 - security update	Nessus	Debian Local Security Checks	Local	medium
224826	Linux Distros Unpatched Vulnerability : CVE-2022-37051	Nessus	Misc.	Local	medium
186209	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS : poppler vulnerabilities (USN-6508-1)	Nessus	Ubuntu Local Security Checks	Local	high
183199	Debian dla-3620 : gir1.2-poppler-0.18 - security update	Nessus	Debian Local Security Checks	Local	high
182744	SUSE SLED15: libpoppler-cpp0 / libpoppler-devel / libpoppler-glib-devel / etc (SUSE-SU-2023:3998-1)	Nessus	SuSE Local Security Checks	Local	high
182672	SUSE SLES15: libpoppler-cpp0 / libpoppler-devel / libpoppler-glib-devel / etc (SUSE-SU-2023:3983-1)	Nessus	SuSE Local Security Checks	Local	high
182670	SUSE SLES12: libpoppler-cpp0 / libpoppler-devel / libpoppler-glib-devel / etc (SUSE-SU-2023:3982-1)	Nessus	SuSE Local Security Checks	Local	high
182492	SUSE SLED15: libpoppler-cpp0 / libpoppler-cpp0-32bit / libpoppler-devel / etc (SUSE-SU-2023:3947-1)	Nessus	SuSE Local Security Checks	Local	medium

Detections

Analytics

CVE-2022-37051

medium

Tenable Plugins

medium

medium

medium

medium

high

high

high

high

high

medium