Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/poppler@0.26.5-2~bpo70%2B1
Typedeb
Namespacedebian
Namepoppler
Version0.26.5-2~bpo70+1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version26.01.0-4
Latest_non_vulnerable_version26.01.0-4
Affected_by_vulnerabilities
0
url VCID-1dky-1wb2-huaa
vulnerability_id VCID-1dky-1wb2-huaa
summary In Poppler 0.59.0, memory corruption occurs in a call to Object::streamGetChar in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp, Gfx::opShowText, and Gfx::doShowText calls (aka a Gfx.cc infinite loop).
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14519.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14519.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-14519
reference_id
reference_type
scores
0
value 0.00123
scoring_system epss
scoring_elements 0.30985
published_at 2026-06-04T12:55:00Z
1
value 0.00123
scoring_system epss
scoring_elements 0.31051
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-14519
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
15
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:N/I:N/A:P
1
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
16
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1499165
reference_id 1499165
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1499165
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876086
reference_id 876086
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876086
18
reference_url https://usn.ubuntu.com/3433-1/
reference_id USN-3433-1
reference_type
scores
url https://usn.ubuntu.com/3433-1/
fixed_packages
0
url pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
purl pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dky-1wb2-huaa
1
vulnerability VCID-4mt9-s54t-uub2
2
vulnerability VCID-6x2t-evww-sbdv
3
vulnerability VCID-7nuu-hq66-67es
4
vulnerability VCID-aqh3-9esc-jqg7
5
vulnerability VCID-ax7h-qsmd-hyc9
6
vulnerability VCID-btq8-dzuk-4yfk
7
vulnerability VCID-bytg-r7hs-gyeg
8
vulnerability VCID-c2n4-uugz-wfac
9
vulnerability VCID-gg77-12mg-k7d2
10
vulnerability VCID-mzzq-s6gj-k3hw
11
vulnerability VCID-ndst-6nx1-1qcp
12
vulnerability VCID-p82j-3rgh-tqgf
13
vulnerability VCID-q9zx-mkrf-k3bh
14
vulnerability VCID-snd9-bt5h-6ycw
15
vulnerability VCID-v9g2-msy2-gbhc
16
vulnerability VCID-xsp3-9g35-m7b5
17
vulnerability VCID-yhxt-1rx2-cbc1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.26.5-2%252Bdeb8u4
1
url pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
purl pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ax7h-qsmd-hyc9
1
vulnerability VCID-btq8-dzuk-4yfk
2
vulnerability VCID-c2n4-uugz-wfac
3
vulnerability VCID-gg77-12mg-k7d2
4
vulnerability VCID-mzzq-s6gj-k3hw
5
vulnerability VCID-ndst-6nx1-1qcp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.48.0-2%252Bdeb9u2
aliases CVE-2017-14519
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1dky-1wb2-huaa
1
url VCID-4mt9-s54t-uub2
vulnerability_id VCID-4mt9-s54t-uub2
summary The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability because a data structure is not initialized, which allows an attacker to launch a denial of service attack.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14975.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14975.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-14975
reference_id
reference_type
scores
0
value 0.01097
scoring_system epss
scoring_elements 0.78346
published_at 2026-06-04T12:55:00Z
1
value 0.01097
scoring_system epss
scoring_elements 0.78372
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-14975
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
15
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:N/I:N/A:P
1
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
16
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1500343
reference_id 1500343
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1500343
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877957
reference_id 877957
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877957
18
reference_url https://security.gentoo.org/glsa/201804-03
reference_id GLSA-201804-03
reference_type
scores
url https://security.gentoo.org/glsa/201804-03
19
reference_url https://usn.ubuntu.com/3440-1/
reference_id USN-3440-1
reference_type
scores
url https://usn.ubuntu.com/3440-1/
fixed_packages
0
url pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
purl pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dky-1wb2-huaa
1
vulnerability VCID-4mt9-s54t-uub2
2
vulnerability VCID-6x2t-evww-sbdv
3
vulnerability VCID-7nuu-hq66-67es
4
vulnerability VCID-aqh3-9esc-jqg7
5
vulnerability VCID-ax7h-qsmd-hyc9
6
vulnerability VCID-btq8-dzuk-4yfk
7
vulnerability VCID-bytg-r7hs-gyeg
8
vulnerability VCID-c2n4-uugz-wfac
9
vulnerability VCID-gg77-12mg-k7d2
10
vulnerability VCID-mzzq-s6gj-k3hw
11
vulnerability VCID-ndst-6nx1-1qcp
12
vulnerability VCID-p82j-3rgh-tqgf
13
vulnerability VCID-q9zx-mkrf-k3bh
14
vulnerability VCID-snd9-bt5h-6ycw
15
vulnerability VCID-v9g2-msy2-gbhc
16
vulnerability VCID-xsp3-9g35-m7b5
17
vulnerability VCID-yhxt-1rx2-cbc1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.26.5-2%252Bdeb8u4
1
url pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
purl pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ax7h-qsmd-hyc9
1
vulnerability VCID-btq8-dzuk-4yfk
2
vulnerability VCID-c2n4-uugz-wfac
3
vulnerability VCID-gg77-12mg-k7d2
4
vulnerability VCID-mzzq-s6gj-k3hw
5
vulnerability VCID-ndst-6nx1-1qcp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.48.0-2%252Bdeb9u2
aliases CVE-2017-14975
risk_score 1.5
exploitability 0.5
weighted_severity 3.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4mt9-s54t-uub2
2
url VCID-6x2t-evww-sbdv
vulnerability_id VCID-6x2t-evww-sbdv
summary The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a heap-based buffer over-read vulnerability if an out-of-bounds font dictionary index is encountered, which allows an attacker to launch a denial of service attack.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14976.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14976.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-14976
reference_id
reference_type
scores
0
value 0.01093
scoring_system epss
scoring_elements 0.78307
published_at 2026-06-04T12:55:00Z
1
value 0.01093
scoring_system epss
scoring_elements 0.78333
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-14976
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
15
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:N/I:N/A:P
1
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
16
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1500345
reference_id 1500345
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1500345
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877954
reference_id 877954
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877954
18
reference_url https://security.gentoo.org/glsa/201804-03
reference_id GLSA-201804-03
reference_type
scores
url https://security.gentoo.org/glsa/201804-03
19
reference_url https://usn.ubuntu.com/3517-1/
reference_id USN-3517-1
reference_type
scores
url https://usn.ubuntu.com/3517-1/
fixed_packages
0
url pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
purl pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dky-1wb2-huaa
1
vulnerability VCID-4mt9-s54t-uub2
2
vulnerability VCID-6x2t-evww-sbdv
3
vulnerability VCID-7nuu-hq66-67es
4
vulnerability VCID-aqh3-9esc-jqg7
5
vulnerability VCID-ax7h-qsmd-hyc9
6
vulnerability VCID-btq8-dzuk-4yfk
7
vulnerability VCID-bytg-r7hs-gyeg
8
vulnerability VCID-c2n4-uugz-wfac
9
vulnerability VCID-gg77-12mg-k7d2
10
vulnerability VCID-mzzq-s6gj-k3hw
11
vulnerability VCID-ndst-6nx1-1qcp
12
vulnerability VCID-p82j-3rgh-tqgf
13
vulnerability VCID-q9zx-mkrf-k3bh
14
vulnerability VCID-snd9-bt5h-6ycw
15
vulnerability VCID-v9g2-msy2-gbhc
16
vulnerability VCID-xsp3-9g35-m7b5
17
vulnerability VCID-yhxt-1rx2-cbc1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.26.5-2%252Bdeb8u4
1
url pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
purl pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ax7h-qsmd-hyc9
1
vulnerability VCID-btq8-dzuk-4yfk
2
vulnerability VCID-c2n4-uugz-wfac
3
vulnerability VCID-gg77-12mg-k7d2
4
vulnerability VCID-mzzq-s6gj-k3hw
5
vulnerability VCID-ndst-6nx1-1qcp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.48.0-2%252Bdeb9u2
aliases CVE-2017-14976
risk_score 1.5
exploitability 0.5
weighted_severity 3.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6x2t-evww-sbdv
3
url VCID-7nuu-hq66-67es
vulnerability_id VCID-7nuu-hq66-67es
summary In Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd() in Splash.cc, which may lead to a potential attack when handling malicious PDF files.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14520.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14520.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-14520
reference_id
reference_type
scores
0
value 0.00223
scoring_system epss
scoring_elements 0.45036
published_at 2026-06-04T12:55:00Z
1
value 0.00223
scoring_system epss
scoring_elements 0.45105
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-14520
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
15
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:N/I:N/A:P
1
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
16
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1494582
reference_id 1494582
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1494582
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876081
reference_id 876081
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876081
18
reference_url https://usn.ubuntu.com/3440-1/
reference_id USN-3440-1
reference_type
scores
url https://usn.ubuntu.com/3440-1/
fixed_packages
0
url pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
purl pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dky-1wb2-huaa
1
vulnerability VCID-4mt9-s54t-uub2
2
vulnerability VCID-6x2t-evww-sbdv
3
vulnerability VCID-7nuu-hq66-67es
4
vulnerability VCID-aqh3-9esc-jqg7
5
vulnerability VCID-ax7h-qsmd-hyc9
6
vulnerability VCID-btq8-dzuk-4yfk
7
vulnerability VCID-bytg-r7hs-gyeg
8
vulnerability VCID-c2n4-uugz-wfac
9
vulnerability VCID-gg77-12mg-k7d2
10
vulnerability VCID-mzzq-s6gj-k3hw
11
vulnerability VCID-ndst-6nx1-1qcp
12
vulnerability VCID-p82j-3rgh-tqgf
13
vulnerability VCID-q9zx-mkrf-k3bh
14
vulnerability VCID-snd9-bt5h-6ycw
15
vulnerability VCID-v9g2-msy2-gbhc
16
vulnerability VCID-xsp3-9g35-m7b5
17
vulnerability VCID-yhxt-1rx2-cbc1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.26.5-2%252Bdeb8u4
1
url pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
purl pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ax7h-qsmd-hyc9
1
vulnerability VCID-btq8-dzuk-4yfk
2
vulnerability VCID-c2n4-uugz-wfac
3
vulnerability VCID-gg77-12mg-k7d2
4
vulnerability VCID-mzzq-s6gj-k3hw
5
vulnerability VCID-ndst-6nx1-1qcp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.48.0-2%252Bdeb9u2
aliases CVE-2017-14520
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7nuu-hq66-67es
4
url VCID-aqh3-9esc-jqg7
vulnerability_id VCID-aqh3-9esc-jqg7
summary In Poppler 0.59.0, a NULL Pointer Dereference exists in the XRef::parseEntry() function in XRef.cc via a crafted PDF document.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14517.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14517.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-14517
reference_id
reference_type
scores
0
value 0.00231
scoring_system epss
scoring_elements 0.45967
published_at 2026-06-04T12:55:00Z
1
value 0.00231
scoring_system epss
scoring_elements 0.46036
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-14517
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
15
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:N/I:N/A:P
1
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
16
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1499162
reference_id 1499162
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1499162
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876079
reference_id 876079
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876079
18
reference_url https://usn.ubuntu.com/3433-1/
reference_id USN-3433-1
reference_type
scores
url https://usn.ubuntu.com/3433-1/
fixed_packages
0
url pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
purl pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dky-1wb2-huaa
1
vulnerability VCID-4mt9-s54t-uub2
2
vulnerability VCID-6x2t-evww-sbdv
3
vulnerability VCID-7nuu-hq66-67es
4
vulnerability VCID-aqh3-9esc-jqg7
5
vulnerability VCID-ax7h-qsmd-hyc9
6
vulnerability VCID-btq8-dzuk-4yfk
7
vulnerability VCID-bytg-r7hs-gyeg
8
vulnerability VCID-c2n4-uugz-wfac
9
vulnerability VCID-gg77-12mg-k7d2
10
vulnerability VCID-mzzq-s6gj-k3hw
11
vulnerability VCID-ndst-6nx1-1qcp
12
vulnerability VCID-p82j-3rgh-tqgf
13
vulnerability VCID-q9zx-mkrf-k3bh
14
vulnerability VCID-snd9-bt5h-6ycw
15
vulnerability VCID-v9g2-msy2-gbhc
16
vulnerability VCID-xsp3-9g35-m7b5
17
vulnerability VCID-yhxt-1rx2-cbc1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.26.5-2%252Bdeb8u4
1
url pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
purl pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ax7h-qsmd-hyc9
1
vulnerability VCID-btq8-dzuk-4yfk
2
vulnerability VCID-c2n4-uugz-wfac
3
vulnerability VCID-gg77-12mg-k7d2
4
vulnerability VCID-mzzq-s6gj-k3hw
5
vulnerability VCID-ndst-6nx1-1qcp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.48.0-2%252Bdeb9u2
aliases CVE-2017-14517
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-aqh3-9esc-jqg7
5
url VCID-ax7h-qsmd-hyc9
vulnerability_id VCID-ax7h-qsmd-hyc9
summary arbitrary code execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9775.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9775.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-9775
reference_id
reference_type
scores
0
value 0.00742
scoring_system epss
scoring_elements 0.73346
published_at 2026-06-04T12:55:00Z
1
value 0.00742
scoring_system epss
scoring_elements 0.73382
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-9775
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
15
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:N/A:P
1
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
16
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1466442
reference_id 1466442
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1466442
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=865680
reference_id 865680
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=865680
18
reference_url https://security.archlinux.org/ASA-201706-33
reference_id ASA-201706-33
reference_type
scores
url https://security.archlinux.org/ASA-201706-33
19
reference_url https://security.archlinux.org/AVG-326
reference_id AVG-326
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-326
20
reference_url https://access.redhat.com/errata/RHSA-2017:2551
reference_id RHSA-2017:2551
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2551
21
reference_url https://usn.ubuntu.com/3350-1/
reference_id USN-3350-1
reference_type
scores
url https://usn.ubuntu.com/3350-1/
fixed_packages
0
url pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
purl pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dky-1wb2-huaa
1
vulnerability VCID-4mt9-s54t-uub2
2
vulnerability VCID-6x2t-evww-sbdv
3
vulnerability VCID-7nuu-hq66-67es
4
vulnerability VCID-aqh3-9esc-jqg7
5
vulnerability VCID-ax7h-qsmd-hyc9
6
vulnerability VCID-btq8-dzuk-4yfk
7
vulnerability VCID-bytg-r7hs-gyeg
8
vulnerability VCID-c2n4-uugz-wfac
9
vulnerability VCID-gg77-12mg-k7d2
10
vulnerability VCID-mzzq-s6gj-k3hw
11
vulnerability VCID-ndst-6nx1-1qcp
12
vulnerability VCID-p82j-3rgh-tqgf
13
vulnerability VCID-q9zx-mkrf-k3bh
14
vulnerability VCID-snd9-bt5h-6ycw
15
vulnerability VCID-v9g2-msy2-gbhc
16
vulnerability VCID-xsp3-9g35-m7b5
17
vulnerability VCID-yhxt-1rx2-cbc1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.26.5-2%252Bdeb8u4
1
url pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
purl pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ax7h-qsmd-hyc9
1
vulnerability VCID-btq8-dzuk-4yfk
2
vulnerability VCID-c2n4-uugz-wfac
3
vulnerability VCID-gg77-12mg-k7d2
4
vulnerability VCID-mzzq-s6gj-k3hw
5
vulnerability VCID-ndst-6nx1-1qcp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.48.0-2%252Bdeb9u2
2
url pkg:deb/debian/poppler@0.71.0-5
purl pkg:deb/debian/poppler@0.71.0-5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ndst-6nx1-1qcp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.71.0-5
aliases CVE-2017-9775
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ax7h-qsmd-hyc9
6
url VCID-btq8-dzuk-4yfk
vulnerability_id VCID-btq8-dzuk-4yfk
summary In Poppler 0.54.0, a memory leak vulnerability was found in the function Object::initArray in Object.cc, which allows attackers to cause a denial of service via a crafted file.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9408.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9408.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-9408
reference_id
reference_type
scores
0
value 0.01046
scoring_system epss
scoring_elements 0.77842
published_at 2026-06-04T12:55:00Z
1
value 0.01046
scoring_system epss
scoring_elements 0.77869
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-9408
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
15
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 1.7
scoring_system cvssv2
scoring_elements AV:L/AC:L/Au:S/C:N/I:N/A:P
1
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
16
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1458702
reference_id 1458702
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1458702
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864009
reference_id 864009
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864009
18
reference_url https://security.gentoo.org/glsa/201801-17
reference_id GLSA-201801-17
reference_type
scores
url https://security.gentoo.org/glsa/201801-17
19
reference_url https://usn.ubuntu.com/3350-1/
reference_id USN-3350-1
reference_type
scores
url https://usn.ubuntu.com/3350-1/
fixed_packages
0
url pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
purl pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dky-1wb2-huaa
1
vulnerability VCID-4mt9-s54t-uub2
2
vulnerability VCID-6x2t-evww-sbdv
3
vulnerability VCID-7nuu-hq66-67es
4
vulnerability VCID-aqh3-9esc-jqg7
5
vulnerability VCID-ax7h-qsmd-hyc9
6
vulnerability VCID-btq8-dzuk-4yfk
7
vulnerability VCID-bytg-r7hs-gyeg
8
vulnerability VCID-c2n4-uugz-wfac
9
vulnerability VCID-gg77-12mg-k7d2
10
vulnerability VCID-mzzq-s6gj-k3hw
11
vulnerability VCID-ndst-6nx1-1qcp
12
vulnerability VCID-p82j-3rgh-tqgf
13
vulnerability VCID-q9zx-mkrf-k3bh
14
vulnerability VCID-snd9-bt5h-6ycw
15
vulnerability VCID-v9g2-msy2-gbhc
16
vulnerability VCID-xsp3-9g35-m7b5
17
vulnerability VCID-yhxt-1rx2-cbc1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.26.5-2%252Bdeb8u4
1
url pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
purl pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ax7h-qsmd-hyc9
1
vulnerability VCID-btq8-dzuk-4yfk
2
vulnerability VCID-c2n4-uugz-wfac
3
vulnerability VCID-gg77-12mg-k7d2
4
vulnerability VCID-mzzq-s6gj-k3hw
5
vulnerability VCID-ndst-6nx1-1qcp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.48.0-2%252Bdeb9u2
2
url pkg:deb/debian/poppler@0.71.0-5
purl pkg:deb/debian/poppler@0.71.0-5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ndst-6nx1-1qcp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.71.0-5
aliases CVE-2017-9408
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-btq8-dzuk-4yfk
7
url VCID-bytg-r7hs-gyeg
vulnerability_id VCID-bytg-r7hs-gyeg
summary The FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability due to lack of validation of a table pointer, which allows an attacker to launch a denial of service attack.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14977.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14977.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-14977
reference_id
reference_type
scores
0
value 0.01097
scoring_system epss
scoring_elements 0.78346
published_at 2026-06-04T12:55:00Z
1
value 0.01097
scoring_system epss
scoring_elements 0.78372
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-14977
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
15
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:N/I:N/A:P
1
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
16
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1500344
reference_id 1500344
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1500344
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877952
reference_id 877952
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877952
18
reference_url https://security.gentoo.org/glsa/201804-03
reference_id GLSA-201804-03
reference_type
scores
url https://security.gentoo.org/glsa/201804-03
19
reference_url https://usn.ubuntu.com/3440-1/
reference_id USN-3440-1
reference_type
scores
url https://usn.ubuntu.com/3440-1/
fixed_packages
0
url pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
purl pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dky-1wb2-huaa
1
vulnerability VCID-4mt9-s54t-uub2
2
vulnerability VCID-6x2t-evww-sbdv
3
vulnerability VCID-7nuu-hq66-67es
4
vulnerability VCID-aqh3-9esc-jqg7
5
vulnerability VCID-ax7h-qsmd-hyc9
6
vulnerability VCID-btq8-dzuk-4yfk
7
vulnerability VCID-bytg-r7hs-gyeg
8
vulnerability VCID-c2n4-uugz-wfac
9
vulnerability VCID-gg77-12mg-k7d2
10
vulnerability VCID-mzzq-s6gj-k3hw
11
vulnerability VCID-ndst-6nx1-1qcp
12
vulnerability VCID-p82j-3rgh-tqgf
13
vulnerability VCID-q9zx-mkrf-k3bh
14
vulnerability VCID-snd9-bt5h-6ycw
15
vulnerability VCID-v9g2-msy2-gbhc
16
vulnerability VCID-xsp3-9g35-m7b5
17
vulnerability VCID-yhxt-1rx2-cbc1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.26.5-2%252Bdeb8u4
1
url pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
purl pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ax7h-qsmd-hyc9
1
vulnerability VCID-btq8-dzuk-4yfk
2
vulnerability VCID-c2n4-uugz-wfac
3
vulnerability VCID-gg77-12mg-k7d2
4
vulnerability VCID-mzzq-s6gj-k3hw
5
vulnerability VCID-ndst-6nx1-1qcp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.48.0-2%252Bdeb9u2
aliases CVE-2017-14977
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bytg-r7hs-gyeg
8
url VCID-c2n4-uugz-wfac
vulnerability_id VCID-c2n4-uugz-wfac
summary arbitrary code execution
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9776.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9776.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-9776
reference_id
reference_type
scores
0
value 0.01248
scoring_system epss
scoring_elements 0.79646
published_at 2026-06-04T12:55:00Z
1
value 0.01248
scoring_system epss
scoring_elements 0.79672
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-9776
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
15
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:N/A:P
1
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
16
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1466443
reference_id 1466443
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1466443
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=865679
reference_id 865679
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=865679
18
reference_url https://security.archlinux.org/ASA-201706-33
reference_id ASA-201706-33
reference_type
scores
url https://security.archlinux.org/ASA-201706-33
19
reference_url https://security.archlinux.org/AVG-326
reference_id AVG-326
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-326
20
reference_url https://access.redhat.com/errata/RHSA-2017:2550
reference_id RHSA-2017:2550
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2550
21
reference_url https://access.redhat.com/errata/RHSA-2017:2551
reference_id RHSA-2017:2551
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2551
22
reference_url https://usn.ubuntu.com/3440-1/
reference_id USN-3440-1
reference_type
scores
url https://usn.ubuntu.com/3440-1/
fixed_packages
0
url pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
purl pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dky-1wb2-huaa
1
vulnerability VCID-4mt9-s54t-uub2
2
vulnerability VCID-6x2t-evww-sbdv
3
vulnerability VCID-7nuu-hq66-67es
4
vulnerability VCID-aqh3-9esc-jqg7
5
vulnerability VCID-ax7h-qsmd-hyc9
6
vulnerability VCID-btq8-dzuk-4yfk
7
vulnerability VCID-bytg-r7hs-gyeg
8
vulnerability VCID-c2n4-uugz-wfac
9
vulnerability VCID-gg77-12mg-k7d2
10
vulnerability VCID-mzzq-s6gj-k3hw
11
vulnerability VCID-ndst-6nx1-1qcp
12
vulnerability VCID-p82j-3rgh-tqgf
13
vulnerability VCID-q9zx-mkrf-k3bh
14
vulnerability VCID-snd9-bt5h-6ycw
15
vulnerability VCID-v9g2-msy2-gbhc
16
vulnerability VCID-xsp3-9g35-m7b5
17
vulnerability VCID-yhxt-1rx2-cbc1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.26.5-2%252Bdeb8u4
1
url pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
purl pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ax7h-qsmd-hyc9
1
vulnerability VCID-btq8-dzuk-4yfk
2
vulnerability VCID-c2n4-uugz-wfac
3
vulnerability VCID-gg77-12mg-k7d2
4
vulnerability VCID-mzzq-s6gj-k3hw
5
vulnerability VCID-ndst-6nx1-1qcp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.48.0-2%252Bdeb9u2
2
url pkg:deb/debian/poppler@0.71.0-5
purl pkg:deb/debian/poppler@0.71.0-5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ndst-6nx1-1qcp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.71.0-5
aliases CVE-2017-9776
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-c2n4-uugz-wfac
9
url VCID-gg77-12mg-k7d2
vulnerability_id VCID-gg77-12mg-k7d2
summary Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19149.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-19149.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-19149
reference_id
reference_type
scores
0
value 0.00261
scoring_system epss
scoring_elements 0.49704
published_at 2026-06-04T12:55:00Z
1
value 0.00261
scoring_system epss
scoring_elements 0.49767
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-19149
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19149
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19149
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1649457
reference_id 1649457
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1649457
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=914600
reference_id 914600
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=914600
6
reference_url https://security.gentoo.org/glsa/201904-04
reference_id GLSA-201904-04
reference_type
scores
url https://security.gentoo.org/glsa/201904-04
7
reference_url https://access.redhat.com/errata/RHSA-2019:2022
reference_id RHSA-2019:2022
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:2022
8
reference_url https://usn.ubuntu.com/3837-1/
reference_id USN-3837-1
reference_type
scores
url https://usn.ubuntu.com/3837-1/
9
reference_url https://usn.ubuntu.com/3837-2/
reference_id USN-3837-2
reference_type
scores
url https://usn.ubuntu.com/3837-2/
fixed_packages
0
url pkg:deb/debian/poppler@0.71.0-5
purl pkg:deb/debian/poppler@0.71.0-5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ndst-6nx1-1qcp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.71.0-5
aliases CVE-2018-19149
risk_score 1.5
exploitability 0.5
weighted_severity 3.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gg77-12mg-k7d2
10
url VCID-mzzq-s6gj-k3hw
vulnerability_id VCID-mzzq-s6gj-k3hw
summary In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16646.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16646.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-16646
reference_id
reference_type
scores
0
value 0.02049
scoring_system epss
scoring_elements 0.84185
published_at 2026-06-04T12:55:00Z
1
value 0.02049
scoring_system epss
scoring_elements 0.84208
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-16646
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16646
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16646
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1626618
reference_id 1626618
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1626618
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=909802
reference_id 909802
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=909802
6
reference_url https://access.redhat.com/errata/RHSA-2019:2022
reference_id RHSA-2019:2022
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:2022
7
reference_url https://usn.ubuntu.com/3837-1/
reference_id USN-3837-1
reference_type
scores
url https://usn.ubuntu.com/3837-1/
8
reference_url https://usn.ubuntu.com/3837-2/
reference_id USN-3837-2
reference_type
scores
url https://usn.ubuntu.com/3837-2/
fixed_packages
0
url pkg:deb/debian/poppler@0.71.0-5
purl pkg:deb/debian/poppler@0.71.0-5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ndst-6nx1-1qcp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.71.0-5
aliases CVE-2018-16646
risk_score 1.9
exploitability 0.5
weighted_severity 3.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mzzq-s6gj-k3hw
11
url VCID-ndst-6nx1-1qcp
vulnerability_id VCID-ndst-6nx1-1qcp
summary poppler: Stack-Overflow in `FoFiType1C::cvtGlyph`
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-36023.json
reference_id
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-36023.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-36023
reference_id
reference_type
scores
0
value 0.00068
scoring_system epss
scoring_elements 0.21149
published_at 2026-06-04T12:55:00Z
1
value 0.00068
scoring_system epss
scoring_elements 0.21231
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-36023
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36023
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36023
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013
reference_id 1013
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-09T17:59:31Z/
url https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2231510
reference_id 2231510
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2231510
6
reference_url https://lists.debian.org/debian-lts-announce/2023/08/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-09T17:59:31Z/
url https://lists.debian.org/debian-lts-announce/2023/08/msg00017.html
7
reference_url https://usn.ubuntu.com/6299-1/
reference_id USN-6299-1
reference_type
scores
url https://usn.ubuntu.com/6299-1/
fixed_packages
0
url pkg:deb/debian/poppler@22.12.0-2%2Bdeb12u1
purl pkg:deb/debian/poppler@22.12.0-2%2Bdeb12u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-25s4-qujz-8kcf
1
vulnerability VCID-4n4u-c4u9-kkep
2
vulnerability VCID-4y9q-jfwk-5bde
3
vulnerability VCID-arhw-n285-r3dv
4
vulnerability VCID-e3pp-vnez-rude
5
vulnerability VCID-r2f4-bgaw-t7gu
6
vulnerability VCID-sw3e-49nw-w7fv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@22.12.0-2%252Bdeb12u1
aliases CVE-2020-36023
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ndst-6nx1-1qcp
12
url VCID-p82j-3rgh-tqgf
vulnerability_id VCID-p82j-3rgh-tqgf
summary In Poppler 0.59.0, a floating point exception exists in the isImageInterpolationRequired() function in Splash.cc via a crafted PDF document.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14518.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14518.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-14518
reference_id
reference_type
scores
0
value 0.00272
scoring_system epss
scoring_elements 0.50797
published_at 2026-06-04T12:55:00Z
1
value 0.00272
scoring_system epss
scoring_elements 0.50857
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-14518
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
15
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:N/I:N/A:P
1
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
16
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1499163
reference_id 1499163
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1499163
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876082
reference_id 876082
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876082
18
reference_url https://usn.ubuntu.com/3440-1/
reference_id USN-3440-1
reference_type
scores
url https://usn.ubuntu.com/3440-1/
fixed_packages
0
url pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
purl pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dky-1wb2-huaa
1
vulnerability VCID-4mt9-s54t-uub2
2
vulnerability VCID-6x2t-evww-sbdv
3
vulnerability VCID-7nuu-hq66-67es
4
vulnerability VCID-aqh3-9esc-jqg7
5
vulnerability VCID-ax7h-qsmd-hyc9
6
vulnerability VCID-btq8-dzuk-4yfk
7
vulnerability VCID-bytg-r7hs-gyeg
8
vulnerability VCID-c2n4-uugz-wfac
9
vulnerability VCID-gg77-12mg-k7d2
10
vulnerability VCID-mzzq-s6gj-k3hw
11
vulnerability VCID-ndst-6nx1-1qcp
12
vulnerability VCID-p82j-3rgh-tqgf
13
vulnerability VCID-q9zx-mkrf-k3bh
14
vulnerability VCID-snd9-bt5h-6ycw
15
vulnerability VCID-v9g2-msy2-gbhc
16
vulnerability VCID-xsp3-9g35-m7b5
17
vulnerability VCID-yhxt-1rx2-cbc1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.26.5-2%252Bdeb8u4
1
url pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
purl pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ax7h-qsmd-hyc9
1
vulnerability VCID-btq8-dzuk-4yfk
2
vulnerability VCID-c2n4-uugz-wfac
3
vulnerability VCID-gg77-12mg-k7d2
4
vulnerability VCID-mzzq-s6gj-k3hw
5
vulnerability VCID-ndst-6nx1-1qcp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.48.0-2%252Bdeb9u2
aliases CVE-2017-14518
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p82j-3rgh-tqgf
13
url VCID-q9zx-mkrf-k3bh
vulnerability_id VCID-q9zx-mkrf-k3bh
summary The function GfxImageColorMap::getGray in GfxState.cc in Poppler 0.54.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted PDF document, related to missing color-map validation in ImageOutputDev.cc.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9865.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9865.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-9865
reference_id
reference_type
scores
0
value 0.0076
scoring_system epss
scoring_elements 0.73707
published_at 2026-06-04T12:55:00Z
1
value 0.0076
scoring_system epss
scoring_elements 0.73744
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-9865
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
15
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:N/A:P
1
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
16
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1466435
reference_id 1466435
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1466435
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867477
reference_id 867477
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867477
18
reference_url https://security.gentoo.org/glsa/201801-17
reference_id GLSA-201801-17
reference_type
scores
url https://security.gentoo.org/glsa/201801-17
19
reference_url https://usn.ubuntu.com/4042-1/
reference_id USN-4042-1
reference_type
scores
url https://usn.ubuntu.com/4042-1/
fixed_packages
0
url pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
purl pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dky-1wb2-huaa
1
vulnerability VCID-4mt9-s54t-uub2
2
vulnerability VCID-6x2t-evww-sbdv
3
vulnerability VCID-7nuu-hq66-67es
4
vulnerability VCID-aqh3-9esc-jqg7
5
vulnerability VCID-ax7h-qsmd-hyc9
6
vulnerability VCID-btq8-dzuk-4yfk
7
vulnerability VCID-bytg-r7hs-gyeg
8
vulnerability VCID-c2n4-uugz-wfac
9
vulnerability VCID-gg77-12mg-k7d2
10
vulnerability VCID-mzzq-s6gj-k3hw
11
vulnerability VCID-ndst-6nx1-1qcp
12
vulnerability VCID-p82j-3rgh-tqgf
13
vulnerability VCID-q9zx-mkrf-k3bh
14
vulnerability VCID-snd9-bt5h-6ycw
15
vulnerability VCID-v9g2-msy2-gbhc
16
vulnerability VCID-xsp3-9g35-m7b5
17
vulnerability VCID-yhxt-1rx2-cbc1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.26.5-2%252Bdeb8u4
1
url pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
purl pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ax7h-qsmd-hyc9
1
vulnerability VCID-btq8-dzuk-4yfk
2
vulnerability VCID-c2n4-uugz-wfac
3
vulnerability VCID-gg77-12mg-k7d2
4
vulnerability VCID-mzzq-s6gj-k3hw
5
vulnerability VCID-ndst-6nx1-1qcp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.48.0-2%252Bdeb9u2
aliases CVE-2017-9865
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q9zx-mkrf-k3bh
14
url VCID-re3v-ymkc-53bt
vulnerability_id VCID-re3v-ymkc-53bt
summary Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via an invalid blend mode in the ExtGState dictionary in a crafted PDF document.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8868.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8868.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-8868
reference_id
reference_type
scores
0
value 0.01087
scoring_system epss
scoring_elements 0.78249
published_at 2026-06-04T12:55:00Z
1
value 0.01087
scoring_system epss
scoring_elements 0.78274
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-8868
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8868
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8868
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:N/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1326225
reference_id 1326225
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1326225
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=822578
reference_id 822578
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=822578
6
reference_url https://security.gentoo.org/glsa/201611-15
reference_id GLSA-201611-15
reference_type
scores
url https://security.gentoo.org/glsa/201611-15
7
reference_url https://access.redhat.com/errata/RHSA-2016:2580
reference_id RHSA-2016:2580
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2580
8
reference_url https://usn.ubuntu.com/2958-1/
reference_id USN-2958-1
reference_type
scores
url https://usn.ubuntu.com/2958-1/
fixed_packages
0
url pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
purl pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dky-1wb2-huaa
1
vulnerability VCID-4mt9-s54t-uub2
2
vulnerability VCID-6x2t-evww-sbdv
3
vulnerability VCID-7nuu-hq66-67es
4
vulnerability VCID-aqh3-9esc-jqg7
5
vulnerability VCID-ax7h-qsmd-hyc9
6
vulnerability VCID-btq8-dzuk-4yfk
7
vulnerability VCID-bytg-r7hs-gyeg
8
vulnerability VCID-c2n4-uugz-wfac
9
vulnerability VCID-gg77-12mg-k7d2
10
vulnerability VCID-mzzq-s6gj-k3hw
11
vulnerability VCID-ndst-6nx1-1qcp
12
vulnerability VCID-p82j-3rgh-tqgf
13
vulnerability VCID-q9zx-mkrf-k3bh
14
vulnerability VCID-snd9-bt5h-6ycw
15
vulnerability VCID-v9g2-msy2-gbhc
16
vulnerability VCID-xsp3-9g35-m7b5
17
vulnerability VCID-yhxt-1rx2-cbc1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.26.5-2%252Bdeb8u4
aliases CVE-2015-8868
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-re3v-ymkc-53bt
15
url VCID-snd9-bt5h-6ycw
vulnerability_id VCID-snd9-bt5h-6ycw
summary In Poppler 0.59.0, a NULL Pointer Dereference exists in the GfxImageColorMap::getGrayLine() function in GfxState.cc via a crafted PDF document.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15565.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15565.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-15565
reference_id
reference_type
scores
0
value 0.00617
scoring_system epss
scoring_elements 0.70331
published_at 2026-06-04T12:55:00Z
1
value 0.00617
scoring_system epss
scoring_elements 0.70373
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-15565
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1510977
reference_id 1510977
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1510977
16
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=879066
reference_id 879066
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=879066
17
reference_url https://usn.ubuntu.com/3467-1/
reference_id USN-3467-1
reference_type
scores
url https://usn.ubuntu.com/3467-1/
fixed_packages
0
url pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
purl pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dky-1wb2-huaa
1
vulnerability VCID-4mt9-s54t-uub2
2
vulnerability VCID-6x2t-evww-sbdv
3
vulnerability VCID-7nuu-hq66-67es
4
vulnerability VCID-aqh3-9esc-jqg7
5
vulnerability VCID-ax7h-qsmd-hyc9
6
vulnerability VCID-btq8-dzuk-4yfk
7
vulnerability VCID-bytg-r7hs-gyeg
8
vulnerability VCID-c2n4-uugz-wfac
9
vulnerability VCID-gg77-12mg-k7d2
10
vulnerability VCID-mzzq-s6gj-k3hw
11
vulnerability VCID-ndst-6nx1-1qcp
12
vulnerability VCID-p82j-3rgh-tqgf
13
vulnerability VCID-q9zx-mkrf-k3bh
14
vulnerability VCID-snd9-bt5h-6ycw
15
vulnerability VCID-v9g2-msy2-gbhc
16
vulnerability VCID-xsp3-9g35-m7b5
17
vulnerability VCID-yhxt-1rx2-cbc1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.26.5-2%252Bdeb8u4
1
url pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
purl pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ax7h-qsmd-hyc9
1
vulnerability VCID-btq8-dzuk-4yfk
2
vulnerability VCID-c2n4-uugz-wfac
3
vulnerability VCID-gg77-12mg-k7d2
4
vulnerability VCID-mzzq-s6gj-k3hw
5
vulnerability VCID-ndst-6nx1-1qcp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.48.0-2%252Bdeb9u2
aliases CVE-2017-15565
risk_score 1.5
exploitability 0.5
weighted_severity 3.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-snd9-bt5h-6ycw
16
url VCID-v9g2-msy2-gbhc
vulnerability_id VCID-v9g2-msy2-gbhc
summary In Poppler 0.54.0, a memory leak vulnerability was found in the function gmalloc in gmem.cc, which allows attackers to cause a denial of service via a crafted file.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9406.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9406.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-9406
reference_id
reference_type
scores
0
value 0.01046
scoring_system epss
scoring_elements 0.77842
published_at 2026-06-04T12:55:00Z
1
value 0.01046
scoring_system epss
scoring_elements 0.77869
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-9406
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
15
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 2.1
scoring_system cvssv2
scoring_elements AV:L/AC:L/Au:N/C:N/I:N/A:P
1
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
16
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1458701
reference_id 1458701
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1458701
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864010
reference_id 864010
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864010
18
reference_url https://security.gentoo.org/glsa/201801-17
reference_id GLSA-201801-17
reference_type
scores
url https://security.gentoo.org/glsa/201801-17
19
reference_url https://usn.ubuntu.com/3350-1/
reference_id USN-3350-1
reference_type
scores
url https://usn.ubuntu.com/3350-1/
fixed_packages
0
url pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
purl pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dky-1wb2-huaa
1
vulnerability VCID-4mt9-s54t-uub2
2
vulnerability VCID-6x2t-evww-sbdv
3
vulnerability VCID-7nuu-hq66-67es
4
vulnerability VCID-aqh3-9esc-jqg7
5
vulnerability VCID-ax7h-qsmd-hyc9
6
vulnerability VCID-btq8-dzuk-4yfk
7
vulnerability VCID-bytg-r7hs-gyeg
8
vulnerability VCID-c2n4-uugz-wfac
9
vulnerability VCID-gg77-12mg-k7d2
10
vulnerability VCID-mzzq-s6gj-k3hw
11
vulnerability VCID-ndst-6nx1-1qcp
12
vulnerability VCID-p82j-3rgh-tqgf
13
vulnerability VCID-q9zx-mkrf-k3bh
14
vulnerability VCID-snd9-bt5h-6ycw
15
vulnerability VCID-v9g2-msy2-gbhc
16
vulnerability VCID-xsp3-9g35-m7b5
17
vulnerability VCID-yhxt-1rx2-cbc1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.26.5-2%252Bdeb8u4
1
url pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
purl pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ax7h-qsmd-hyc9
1
vulnerability VCID-btq8-dzuk-4yfk
2
vulnerability VCID-c2n4-uugz-wfac
3
vulnerability VCID-gg77-12mg-k7d2
4
vulnerability VCID-mzzq-s6gj-k3hw
5
vulnerability VCID-ndst-6nx1-1qcp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.48.0-2%252Bdeb9u2
aliases CVE-2017-9406
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-v9g2-msy2-gbhc
17
url VCID-xsp3-9g35-m7b5
vulnerability_id VCID-xsp3-9g35-m7b5
summary A stack-based buffer over-read exists in FoFiTrueType::dumpString in fofi/FoFiTrueType.cc in Xpdf 4.01.01. It can, for example, be triggered by sending crafted TrueType data in a PDF document to the pdftops tool. It might allow an attacker to cause Denial of Service or leak memory data into dump content.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12360.json
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-12360.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-12360
reference_id
reference_type
scores
0
value 0.00338
scoring_system epss
scoring_elements 0.56846
published_at 2026-06-04T12:55:00Z
1
value 0.00338
scoring_system epss
scoring_elements 0.56897
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-12360
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12360
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12360
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1850876
reference_id 1850876
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1850876
fixed_packages
0
url pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
purl pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ax7h-qsmd-hyc9
1
vulnerability VCID-btq8-dzuk-4yfk
2
vulnerability VCID-c2n4-uugz-wfac
3
vulnerability VCID-gg77-12mg-k7d2
4
vulnerability VCID-mzzq-s6gj-k3hw
5
vulnerability VCID-ndst-6nx1-1qcp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.48.0-2%252Bdeb9u2
aliases CVE-2019-12360
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xsp3-9g35-m7b5
18
url VCID-yhxt-1rx2-cbc1
vulnerability_id VCID-yhxt-1rx2-cbc1
summary freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000456.json
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000456.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-1000456
reference_id
reference_type
scores
0
value 0.00719
scoring_system epss
scoring_elements 0.72835
published_at 2026-06-04T12:55:00Z
1
value 0.00719
scoring_system epss
scoring_elements 0.72873
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-1000456
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000456
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000456
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1531382
reference_id 1531382
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1531382
5
reference_url https://security.gentoo.org/glsa/201804-03
reference_id GLSA-201804-03
reference_type
scores
url https://security.gentoo.org/glsa/201804-03
6
reference_url https://usn.ubuntu.com/3517-1/
reference_id USN-3517-1
reference_type
scores
url https://usn.ubuntu.com/3517-1/
fixed_packages
0
url pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
purl pkg:deb/debian/poppler@0.26.5-2%2Bdeb8u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dky-1wb2-huaa
1
vulnerability VCID-4mt9-s54t-uub2
2
vulnerability VCID-6x2t-evww-sbdv
3
vulnerability VCID-7nuu-hq66-67es
4
vulnerability VCID-aqh3-9esc-jqg7
5
vulnerability VCID-ax7h-qsmd-hyc9
6
vulnerability VCID-btq8-dzuk-4yfk
7
vulnerability VCID-bytg-r7hs-gyeg
8
vulnerability VCID-c2n4-uugz-wfac
9
vulnerability VCID-gg77-12mg-k7d2
10
vulnerability VCID-mzzq-s6gj-k3hw
11
vulnerability VCID-ndst-6nx1-1qcp
12
vulnerability VCID-p82j-3rgh-tqgf
13
vulnerability VCID-q9zx-mkrf-k3bh
14
vulnerability VCID-snd9-bt5h-6ycw
15
vulnerability VCID-v9g2-msy2-gbhc
16
vulnerability VCID-xsp3-9g35-m7b5
17
vulnerability VCID-yhxt-1rx2-cbc1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.26.5-2%252Bdeb8u4
1
url pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
purl pkg:deb/debian/poppler@0.48.0-2%2Bdeb9u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ax7h-qsmd-hyc9
1
vulnerability VCID-btq8-dzuk-4yfk
2
vulnerability VCID-c2n4-uugz-wfac
3
vulnerability VCID-gg77-12mg-k7d2
4
vulnerability VCID-mzzq-s6gj-k3hw
5
vulnerability VCID-ndst-6nx1-1qcp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.48.0-2%252Bdeb9u2
aliases CVE-2017-1000456
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yhxt-1rx2-cbc1
Fixing_vulnerabilities
0
url VCID-5q6q-z49r-c7c6
vulnerability_id VCID-5q6q-z49r-c7c6
summary Format string vulnerability in the extractPages function in utils/pdfseparate.cc in poppler before 0.24.3 allows remote attackers to cause a denial of service (crash) via format string specifiers in a destination filename.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4474.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4474.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-4474
reference_id
reference_type
scores
0
value 0.25399
scoring_system epss
scoring_elements 0.96315
published_at 2026-06-04T12:55:00Z
1
value 0.25399
scoring_system epss
scoring_elements 0.9632
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-4474
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4474
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4474
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1024762
reference_id 1024762
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1024762
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729064
reference_id 729064
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729064
5
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/38817.txt
reference_id CVE-2013-4474;OSVDB-99066
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/38817.txt
6
reference_url https://www.securityfocus.com/bid/63374/info
reference_id CVE-2013-4474;OSVDB-99066
reference_type exploit
scores
url https://www.securityfocus.com/bid/63374/info
7
reference_url https://security.gentoo.org/glsa/201401-21
reference_id GLSA-201401-21
reference_type
scores
url https://security.gentoo.org/glsa/201401-21
8
reference_url https://usn.ubuntu.com/2958-1/
reference_id USN-2958-1
reference_type
scores
url https://usn.ubuntu.com/2958-1/
fixed_packages
0
url pkg:deb/debian/poppler@0.26.5-2~bpo70%2B1
purl pkg:deb/debian/poppler@0.26.5-2~bpo70%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dky-1wb2-huaa
1
vulnerability VCID-4mt9-s54t-uub2
2
vulnerability VCID-6x2t-evww-sbdv
3
vulnerability VCID-7nuu-hq66-67es
4
vulnerability VCID-aqh3-9esc-jqg7
5
vulnerability VCID-ax7h-qsmd-hyc9
6
vulnerability VCID-btq8-dzuk-4yfk
7
vulnerability VCID-bytg-r7hs-gyeg
8
vulnerability VCID-c2n4-uugz-wfac
9
vulnerability VCID-gg77-12mg-k7d2
10
vulnerability VCID-mzzq-s6gj-k3hw
11
vulnerability VCID-ndst-6nx1-1qcp
12
vulnerability VCID-p82j-3rgh-tqgf
13
vulnerability VCID-q9zx-mkrf-k3bh
14
vulnerability VCID-re3v-ymkc-53bt
15
vulnerability VCID-snd9-bt5h-6ycw
16
vulnerability VCID-v9g2-msy2-gbhc
17
vulnerability VCID-xsp3-9g35-m7b5
18
vulnerability VCID-yhxt-1rx2-cbc1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.26.5-2~bpo70%252B1
aliases CVE-2013-4474
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5q6q-z49r-c7c6
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.26.5-2~bpo70%252B1