Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/poppler@0.57.0-2?distro=trixie
Typedeb
Namespacedebian
Namepoppler
Version0.57.0-2
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version0.61.1-2
Latest_non_vulnerable_version25.03.0-11.1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-3u3m-ru9u-buem
vulnerability_id VCID-3u3m-ru9u-buem
summary security update
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9775.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9775.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-9775
reference_id
reference_type
scores
0
value 0.00742
scoring_system epss
scoring_elements 0.73065
published_at 2026-04-26T12:55:00Z
1
value 0.00742
scoring_system epss
scoring_elements 0.73055
published_at 2026-04-24T12:55:00Z
2
value 0.00778
scoring_system epss
scoring_elements 0.73693
published_at 2026-04-18T12:55:00Z
3
value 0.00778
scoring_system epss
scoring_elements 0.73589
published_at 2026-04-01T12:55:00Z
4
value 0.00778
scoring_system epss
scoring_elements 0.73598
published_at 2026-04-02T12:55:00Z
5
value 0.00778
scoring_system epss
scoring_elements 0.73622
published_at 2026-04-04T12:55:00Z
6
value 0.00778
scoring_system epss
scoring_elements 0.73594
published_at 2026-04-07T12:55:00Z
7
value 0.00778
scoring_system epss
scoring_elements 0.7363
published_at 2026-04-08T12:55:00Z
8
value 0.00778
scoring_system epss
scoring_elements 0.73643
published_at 2026-04-09T12:55:00Z
9
value 0.00778
scoring_system epss
scoring_elements 0.73666
published_at 2026-04-11T12:55:00Z
10
value 0.00778
scoring_system epss
scoring_elements 0.73648
published_at 2026-04-12T12:55:00Z
11
value 0.00778
scoring_system epss
scoring_elements 0.7364
published_at 2026-04-13T12:55:00Z
12
value 0.00778
scoring_system epss
scoring_elements 0.73684
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-9775
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
15
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:N/A:P
1
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
16
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1466442
reference_id 1466442
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1466442
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=865680
reference_id 865680
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=865680
18
reference_url https://security.archlinux.org/ASA-201706-33
reference_id ASA-201706-33
reference_type
scores
url https://security.archlinux.org/ASA-201706-33
19
reference_url https://security.archlinux.org/AVG-326
reference_id AVG-326
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-326
20
reference_url https://access.redhat.com/errata/RHSA-2017:2551
reference_id RHSA-2017:2551
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2551
21
reference_url https://usn.ubuntu.com/3350-1/
reference_id USN-3350-1
reference_type
scores
url https://usn.ubuntu.com/3350-1/
fixed_packages
0
url pkg:deb/debian/poppler@0.57.0-2?distro=trixie
purl pkg:deb/debian/poppler@0.57.0-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.57.0-2%3Fdistro=trixie
1
url pkg:deb/debian/poppler@20.09.0-3.1%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/poppler@20.09.0-3.1%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-48d5-zxmm-r3g4
1
vulnerability VCID-a8zz-dfdm-1uf7
2
vulnerability VCID-anb3-1s96-wbaq
3
vulnerability VCID-ygrf-gq35-fkfd
4
vulnerability VCID-yy6j-1h5z-wbgp
5
vulnerability VCID-yyxy-juya-a3f1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@20.09.0-3.1%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/poppler@22.12.0-2%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/poppler@22.12.0-2%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-48d5-zxmm-r3g4
1
vulnerability VCID-a8zz-dfdm-1uf7
2
vulnerability VCID-anb3-1s96-wbaq
3
vulnerability VCID-ygrf-gq35-fkfd
4
vulnerability VCID-yy6j-1h5z-wbgp
5
vulnerability VCID-yyxy-juya-a3f1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@22.12.0-2%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/poppler@25.03.0-5%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/poppler@25.03.0-5%2Bdeb13u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a8zz-dfdm-1uf7
1
vulnerability VCID-yy6j-1h5z-wbgp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@25.03.0-5%252Bdeb13u2%3Fdistro=trixie
4
url pkg:deb/debian/poppler@25.03.0-11.1?distro=trixie
purl pkg:deb/debian/poppler@25.03.0-11.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@25.03.0-11.1%3Fdistro=trixie
aliases CVE-2017-9775
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3u3m-ru9u-buem
1
url VCID-bvmu-gq2p-jygf
vulnerability_id VCID-bvmu-gq2p-jygf
summary
Multiple vulnerabilities have been found in Poppler, the worst of
    which could allow the execution of arbitrary code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7511.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7511.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-7511
reference_id
reference_type
scores
0
value 0.0032
scoring_system epss
scoring_elements 0.54933
published_at 2026-04-01T12:55:00Z
1
value 0.0032
scoring_system epss
scoring_elements 0.55034
published_at 2026-04-26T12:55:00Z
2
value 0.0032
scoring_system epss
scoring_elements 0.55083
published_at 2026-04-21T12:55:00Z
3
value 0.0032
scoring_system epss
scoring_elements 0.55015
published_at 2026-04-24T12:55:00Z
4
value 0.0032
scoring_system epss
scoring_elements 0.55038
published_at 2026-04-07T12:55:00Z
5
value 0.0032
scoring_system epss
scoring_elements 0.55063
published_at 2026-04-13T12:55:00Z
6
value 0.0032
scoring_system epss
scoring_elements 0.55088
published_at 2026-04-09T12:55:00Z
7
value 0.0032
scoring_system epss
scoring_elements 0.551
published_at 2026-04-11T12:55:00Z
8
value 0.0032
scoring_system epss
scoring_elements 0.5508
published_at 2026-04-12T12:55:00Z
9
value 0.0032
scoring_system epss
scoring_elements 0.55101
published_at 2026-04-16T12:55:00Z
10
value 0.0032
scoring_system epss
scoring_elements 0.55105
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-7511
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7511
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7511
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 2.1
scoring_system cvssv2
scoring_elements AV:L/AC:L/Au:N/C:N/I:N/A:P
1
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1456827
reference_id 1456827
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1456827
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863759
reference_id 863759
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863759
6
reference_url https://security.gentoo.org/glsa/201801-17
reference_id GLSA-201801-17
reference_type
scores
url https://security.gentoo.org/glsa/201801-17
7
reference_url https://usn.ubuntu.com/3350-1/
reference_id USN-3350-1
reference_type
scores
url https://usn.ubuntu.com/3350-1/
fixed_packages
0
url pkg:deb/debian/poppler@0.57.0-2?distro=trixie
purl pkg:deb/debian/poppler@0.57.0-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.57.0-2%3Fdistro=trixie
1
url pkg:deb/debian/poppler@20.09.0-3.1%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/poppler@20.09.0-3.1%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-48d5-zxmm-r3g4
1
vulnerability VCID-a8zz-dfdm-1uf7
2
vulnerability VCID-anb3-1s96-wbaq
3
vulnerability VCID-ygrf-gq35-fkfd
4
vulnerability VCID-yy6j-1h5z-wbgp
5
vulnerability VCID-yyxy-juya-a3f1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@20.09.0-3.1%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/poppler@22.12.0-2%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/poppler@22.12.0-2%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-48d5-zxmm-r3g4
1
vulnerability VCID-a8zz-dfdm-1uf7
2
vulnerability VCID-anb3-1s96-wbaq
3
vulnerability VCID-ygrf-gq35-fkfd
4
vulnerability VCID-yy6j-1h5z-wbgp
5
vulnerability VCID-yyxy-juya-a3f1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@22.12.0-2%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/poppler@25.03.0-5%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/poppler@25.03.0-5%2Bdeb13u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a8zz-dfdm-1uf7
1
vulnerability VCID-yy6j-1h5z-wbgp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@25.03.0-5%252Bdeb13u2%3Fdistro=trixie
4
url pkg:deb/debian/poppler@25.03.0-11.1?distro=trixie
purl pkg:deb/debian/poppler@25.03.0-11.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@25.03.0-11.1%3Fdistro=trixie
aliases CVE-2017-7511
risk_score 1.5
exploitability 0.5
weighted_severity 3.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bvmu-gq2p-jygf
2
url VCID-gt34-muf6-abc7
vulnerability_id VCID-gt34-muf6-abc7
summary
Multiple vulnerabilities have been found in Poppler, the worst of
    which could allow the execution of arbitrary code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9865.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9865.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-9865
reference_id
reference_type
scores
0
value 0.0076
scoring_system epss
scoring_elements 0.73288
published_at 2026-04-01T12:55:00Z
1
value 0.0076
scoring_system epss
scoring_elements 0.73429
published_at 2026-04-26T12:55:00Z
2
value 0.0076
scoring_system epss
scoring_elements 0.73383
published_at 2026-04-21T12:55:00Z
3
value 0.0076
scoring_system epss
scoring_elements 0.73416
published_at 2026-04-24T12:55:00Z
4
value 0.0076
scoring_system epss
scoring_elements 0.73297
published_at 2026-04-02T12:55:00Z
5
value 0.0076
scoring_system epss
scoring_elements 0.73321
published_at 2026-04-04T12:55:00Z
6
value 0.0076
scoring_system epss
scoring_elements 0.73293
published_at 2026-04-07T12:55:00Z
7
value 0.0076
scoring_system epss
scoring_elements 0.73329
published_at 2026-04-08T12:55:00Z
8
value 0.0076
scoring_system epss
scoring_elements 0.73342
published_at 2026-04-09T12:55:00Z
9
value 0.0076
scoring_system epss
scoring_elements 0.73366
published_at 2026-04-11T12:55:00Z
10
value 0.0076
scoring_system epss
scoring_elements 0.73346
published_at 2026-04-12T12:55:00Z
11
value 0.0076
scoring_system epss
scoring_elements 0.73338
published_at 2026-04-13T12:55:00Z
12
value 0.0076
scoring_system epss
scoring_elements 0.73381
published_at 2026-04-16T12:55:00Z
13
value 0.0076
scoring_system epss
scoring_elements 0.73389
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-9865
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
15
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:N/A:P
1
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
16
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1466435
reference_id 1466435
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1466435
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867477
reference_id 867477
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867477
18
reference_url https://security.gentoo.org/glsa/201801-17
reference_id GLSA-201801-17
reference_type
scores
url https://security.gentoo.org/glsa/201801-17
19
reference_url https://usn.ubuntu.com/4042-1/
reference_id USN-4042-1
reference_type
scores
url https://usn.ubuntu.com/4042-1/
fixed_packages
0
url pkg:deb/debian/poppler@0.57.0-2?distro=trixie
purl pkg:deb/debian/poppler@0.57.0-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.57.0-2%3Fdistro=trixie
1
url pkg:deb/debian/poppler@20.09.0-3.1%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/poppler@20.09.0-3.1%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-48d5-zxmm-r3g4
1
vulnerability VCID-a8zz-dfdm-1uf7
2
vulnerability VCID-anb3-1s96-wbaq
3
vulnerability VCID-ygrf-gq35-fkfd
4
vulnerability VCID-yy6j-1h5z-wbgp
5
vulnerability VCID-yyxy-juya-a3f1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@20.09.0-3.1%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/poppler@22.12.0-2%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/poppler@22.12.0-2%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-48d5-zxmm-r3g4
1
vulnerability VCID-a8zz-dfdm-1uf7
2
vulnerability VCID-anb3-1s96-wbaq
3
vulnerability VCID-ygrf-gq35-fkfd
4
vulnerability VCID-yy6j-1h5z-wbgp
5
vulnerability VCID-yyxy-juya-a3f1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@22.12.0-2%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/poppler@25.03.0-5%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/poppler@25.03.0-5%2Bdeb13u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a8zz-dfdm-1uf7
1
vulnerability VCID-yy6j-1h5z-wbgp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@25.03.0-5%252Bdeb13u2%3Fdistro=trixie
4
url pkg:deb/debian/poppler@25.03.0-11.1?distro=trixie
purl pkg:deb/debian/poppler@25.03.0-11.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@25.03.0-11.1%3Fdistro=trixie
aliases CVE-2017-9865
risk_score 1.5
exploitability 0.5
weighted_severity 3.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gt34-muf6-abc7
3
url VCID-jauh-5qga-hucw
vulnerability_id VCID-jauh-5qga-hucw
summary poppler: Stack exhaustion due to infinite recursive call in pdfunite
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7515.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7515.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-7515
reference_id
reference_type
scores
0
value 0.00216
scoring_system epss
scoring_elements 0.44077
published_at 2026-04-01T12:55:00Z
1
value 0.00216
scoring_system epss
scoring_elements 0.4404
published_at 2026-04-26T12:55:00Z
2
value 0.00216
scoring_system epss
scoring_elements 0.44113
published_at 2026-04-21T12:55:00Z
3
value 0.00216
scoring_system epss
scoring_elements 0.44037
published_at 2026-04-24T12:55:00Z
4
value 0.00216
scoring_system epss
scoring_elements 0.44141
published_at 2026-04-02T12:55:00Z
5
value 0.00216
scoring_system epss
scoring_elements 0.44164
published_at 2026-04-04T12:55:00Z
6
value 0.00216
scoring_system epss
scoring_elements 0.44095
published_at 2026-04-07T12:55:00Z
7
value 0.00216
scoring_system epss
scoring_elements 0.44146
published_at 2026-04-08T12:55:00Z
8
value 0.00216
scoring_system epss
scoring_elements 0.44149
published_at 2026-04-09T12:55:00Z
9
value 0.00216
scoring_system epss
scoring_elements 0.44165
published_at 2026-04-11T12:55:00Z
10
value 0.00216
scoring_system epss
scoring_elements 0.44132
published_at 2026-04-13T12:55:00Z
11
value 0.00216
scoring_system epss
scoring_elements 0.44193
published_at 2026-04-16T12:55:00Z
12
value 0.00216
scoring_system epss
scoring_elements 0.44184
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-7515
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7515
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7515
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 1.7
scoring_system cvssv2
scoring_elements AV:L/AC:L/Au:S/C:N/I:N/A:P
1
value 2.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1459066
reference_id 1459066
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1459066
5
reference_url https://usn.ubuntu.com/3350-1/
reference_id USN-3350-1
reference_type
scores
url https://usn.ubuntu.com/3350-1/
fixed_packages
0
url pkg:deb/debian/poppler@0.57.0-2?distro=trixie
purl pkg:deb/debian/poppler@0.57.0-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.57.0-2%3Fdistro=trixie
1
url pkg:deb/debian/poppler@20.09.0-3.1%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/poppler@20.09.0-3.1%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-48d5-zxmm-r3g4
1
vulnerability VCID-a8zz-dfdm-1uf7
2
vulnerability VCID-anb3-1s96-wbaq
3
vulnerability VCID-ygrf-gq35-fkfd
4
vulnerability VCID-yy6j-1h5z-wbgp
5
vulnerability VCID-yyxy-juya-a3f1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@20.09.0-3.1%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/poppler@22.12.0-2%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/poppler@22.12.0-2%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-48d5-zxmm-r3g4
1
vulnerability VCID-a8zz-dfdm-1uf7
2
vulnerability VCID-anb3-1s96-wbaq
3
vulnerability VCID-ygrf-gq35-fkfd
4
vulnerability VCID-yy6j-1h5z-wbgp
5
vulnerability VCID-yyxy-juya-a3f1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@22.12.0-2%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/poppler@25.03.0-5%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/poppler@25.03.0-5%2Bdeb13u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a8zz-dfdm-1uf7
1
vulnerability VCID-yy6j-1h5z-wbgp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@25.03.0-5%252Bdeb13u2%3Fdistro=trixie
4
url pkg:deb/debian/poppler@25.03.0-11.1?distro=trixie
purl pkg:deb/debian/poppler@25.03.0-11.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@25.03.0-11.1%3Fdistro=trixie
aliases CVE-2017-7515
risk_score 1.5
exploitability 0.5
weighted_severity 3.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jauh-5qga-hucw
4
url VCID-jd42-3thk-rqhr
vulnerability_id VCID-jd42-3thk-rqhr
summary
Multiple vulnerabilities have been found in Poppler, the worst of
    which could allow the execution of arbitrary code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9406.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9406.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-9406
reference_id
reference_type
scores
0
value 0.01046
scoring_system epss
scoring_elements 0.77441
published_at 2026-04-01T12:55:00Z
1
value 0.01046
scoring_system epss
scoring_elements 0.77565
published_at 2026-04-26T12:55:00Z
2
value 0.01046
scoring_system epss
scoring_elements 0.77524
published_at 2026-04-21T12:55:00Z
3
value 0.01046
scoring_system epss
scoring_elements 0.77559
published_at 2026-04-24T12:55:00Z
4
value 0.01046
scoring_system epss
scoring_elements 0.77447
published_at 2026-04-02T12:55:00Z
5
value 0.01046
scoring_system epss
scoring_elements 0.77472
published_at 2026-04-04T12:55:00Z
6
value 0.01046
scoring_system epss
scoring_elements 0.77453
published_at 2026-04-07T12:55:00Z
7
value 0.01046
scoring_system epss
scoring_elements 0.77482
published_at 2026-04-08T12:55:00Z
8
value 0.01046
scoring_system epss
scoring_elements 0.77492
published_at 2026-04-09T12:55:00Z
9
value 0.01046
scoring_system epss
scoring_elements 0.77517
published_at 2026-04-11T12:55:00Z
10
value 0.01046
scoring_system epss
scoring_elements 0.77498
published_at 2026-04-12T12:55:00Z
11
value 0.01046
scoring_system epss
scoring_elements 0.77495
published_at 2026-04-13T12:55:00Z
12
value 0.01046
scoring_system epss
scoring_elements 0.77534
published_at 2026-04-16T12:55:00Z
13
value 0.01046
scoring_system epss
scoring_elements 0.77531
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-9406
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
15
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 2.1
scoring_system cvssv2
scoring_elements AV:L/AC:L/Au:N/C:N/I:N/A:P
1
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
16
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1458701
reference_id 1458701
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1458701
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864010
reference_id 864010
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864010
18
reference_url https://security.gentoo.org/glsa/201801-17
reference_id GLSA-201801-17
reference_type
scores
url https://security.gentoo.org/glsa/201801-17
19
reference_url https://usn.ubuntu.com/3350-1/
reference_id USN-3350-1
reference_type
scores
url https://usn.ubuntu.com/3350-1/
fixed_packages
0
url pkg:deb/debian/poppler@0.57.0-2?distro=trixie
purl pkg:deb/debian/poppler@0.57.0-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.57.0-2%3Fdistro=trixie
1
url pkg:deb/debian/poppler@20.09.0-3.1%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/poppler@20.09.0-3.1%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-48d5-zxmm-r3g4
1
vulnerability VCID-a8zz-dfdm-1uf7
2
vulnerability VCID-anb3-1s96-wbaq
3
vulnerability VCID-ygrf-gq35-fkfd
4
vulnerability VCID-yy6j-1h5z-wbgp
5
vulnerability VCID-yyxy-juya-a3f1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@20.09.0-3.1%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/poppler@22.12.0-2%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/poppler@22.12.0-2%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-48d5-zxmm-r3g4
1
vulnerability VCID-a8zz-dfdm-1uf7
2
vulnerability VCID-anb3-1s96-wbaq
3
vulnerability VCID-ygrf-gq35-fkfd
4
vulnerability VCID-yy6j-1h5z-wbgp
5
vulnerability VCID-yyxy-juya-a3f1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@22.12.0-2%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/poppler@25.03.0-5%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/poppler@25.03.0-5%2Bdeb13u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a8zz-dfdm-1uf7
1
vulnerability VCID-yy6j-1h5z-wbgp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@25.03.0-5%252Bdeb13u2%3Fdistro=trixie
4
url pkg:deb/debian/poppler@25.03.0-11.1?distro=trixie
purl pkg:deb/debian/poppler@25.03.0-11.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@25.03.0-11.1%3Fdistro=trixie
aliases CVE-2017-9406
risk_score 1.5
exploitability 0.5
weighted_severity 3.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jd42-3thk-rqhr
5
url VCID-kwa4-641f-ducs
vulnerability_id VCID-kwa4-641f-ducs
summary security update
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9776.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9776.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-9776
reference_id
reference_type
scores
0
value 0.01248
scoring_system epss
scoring_elements 0.79262
published_at 2026-04-01T12:55:00Z
1
value 0.01248
scoring_system epss
scoring_elements 0.79372
published_at 2026-04-26T12:55:00Z
2
value 0.01248
scoring_system epss
scoring_elements 0.79337
published_at 2026-04-16T12:55:00Z
3
value 0.01248
scoring_system epss
scoring_elements 0.79334
published_at 2026-04-21T12:55:00Z
4
value 0.01248
scoring_system epss
scoring_elements 0.79367
published_at 2026-04-24T12:55:00Z
5
value 0.01248
scoring_system epss
scoring_elements 0.79269
published_at 2026-04-02T12:55:00Z
6
value 0.01248
scoring_system epss
scoring_elements 0.79293
published_at 2026-04-04T12:55:00Z
7
value 0.01248
scoring_system epss
scoring_elements 0.79279
published_at 2026-04-07T12:55:00Z
8
value 0.01248
scoring_system epss
scoring_elements 0.79304
published_at 2026-04-08T12:55:00Z
9
value 0.01248
scoring_system epss
scoring_elements 0.79314
published_at 2026-04-09T12:55:00Z
10
value 0.01248
scoring_system epss
scoring_elements 0.79338
published_at 2026-04-11T12:55:00Z
11
value 0.01248
scoring_system epss
scoring_elements 0.79322
published_at 2026-04-12T12:55:00Z
12
value 0.01248
scoring_system epss
scoring_elements 0.7931
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-9776
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
15
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:N/A:P
1
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
16
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1466443
reference_id 1466443
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1466443
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=865679
reference_id 865679
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=865679
18
reference_url https://security.archlinux.org/ASA-201706-33
reference_id ASA-201706-33
reference_type
scores
url https://security.archlinux.org/ASA-201706-33
19
reference_url https://security.archlinux.org/AVG-326
reference_id AVG-326
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-326
20
reference_url https://access.redhat.com/errata/RHSA-2017:2550
reference_id RHSA-2017:2550
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2550
21
reference_url https://access.redhat.com/errata/RHSA-2017:2551
reference_id RHSA-2017:2551
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2551
22
reference_url https://usn.ubuntu.com/3440-1/
reference_id USN-3440-1
reference_type
scores
url https://usn.ubuntu.com/3440-1/
fixed_packages
0
url pkg:deb/debian/poppler@0.57.0-2?distro=trixie
purl pkg:deb/debian/poppler@0.57.0-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.57.0-2%3Fdistro=trixie
1
url pkg:deb/debian/poppler@20.09.0-3.1%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/poppler@20.09.0-3.1%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-48d5-zxmm-r3g4
1
vulnerability VCID-a8zz-dfdm-1uf7
2
vulnerability VCID-anb3-1s96-wbaq
3
vulnerability VCID-ygrf-gq35-fkfd
4
vulnerability VCID-yy6j-1h5z-wbgp
5
vulnerability VCID-yyxy-juya-a3f1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@20.09.0-3.1%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/poppler@22.12.0-2%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/poppler@22.12.0-2%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-48d5-zxmm-r3g4
1
vulnerability VCID-a8zz-dfdm-1uf7
2
vulnerability VCID-anb3-1s96-wbaq
3
vulnerability VCID-ygrf-gq35-fkfd
4
vulnerability VCID-yy6j-1h5z-wbgp
5
vulnerability VCID-yyxy-juya-a3f1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@22.12.0-2%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/poppler@25.03.0-5%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/poppler@25.03.0-5%2Bdeb13u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a8zz-dfdm-1uf7
1
vulnerability VCID-yy6j-1h5z-wbgp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@25.03.0-5%252Bdeb13u2%3Fdistro=trixie
4
url pkg:deb/debian/poppler@25.03.0-11.1?distro=trixie
purl pkg:deb/debian/poppler@25.03.0-11.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@25.03.0-11.1%3Fdistro=trixie
aliases CVE-2017-9776
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kwa4-641f-ducs
6
url VCID-ncat-8jz5-m7e5
vulnerability_id VCID-ncat-8jz5-m7e5
summary An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for the psOpIdiv case.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-10018
reference_id
reference_type
scores
0
value 0.00323
scoring_system epss
scoring_elements 0.55326
published_at 2026-04-24T12:55:00Z
1
value 0.00323
scoring_system epss
scoring_elements 0.55368
published_at 2026-04-13T12:55:00Z
2
value 0.00323
scoring_system epss
scoring_elements 0.55404
published_at 2026-04-16T12:55:00Z
3
value 0.00323
scoring_system epss
scoring_elements 0.55246
published_at 2026-04-01T12:55:00Z
4
value 0.00323
scoring_system epss
scoring_elements 0.55345
published_at 2026-04-02T12:55:00Z
5
value 0.00323
scoring_system epss
scoring_elements 0.55369
published_at 2026-04-04T12:55:00Z
6
value 0.00323
scoring_system epss
scoring_elements 0.55347
published_at 2026-04-26T12:55:00Z
7
value 0.00323
scoring_system epss
scoring_elements 0.55398
published_at 2026-04-09T12:55:00Z
8
value 0.00323
scoring_system epss
scoring_elements 0.55408
published_at 2026-04-18T12:55:00Z
9
value 0.00323
scoring_system epss
scoring_elements 0.55387
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-10018
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10018
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10018
2
reference_url https://forum.xpdfreader.com/viewtopic.php?f=3&t=41276
reference_id
reference_type
scores
url https://forum.xpdfreader.com/viewtopic.php?f=3&t=41276
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://lists.debian.org/debian-lts-announce/2020/11/msg00014.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2020/11/msg00014.html
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=926133
reference_id 926133
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=926133
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xpdfreader:xpdf:4.01.01:*:*:*:*:*:*:*
reference_id cpe:2.3:a:xpdfreader:xpdf:4.01.01:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xpdfreader:xpdf:4.01.01:*:*:*:*:*:*:*
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
reference_id cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
reference_id cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*
reference_id cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
reference_id cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-10018
reference_id CVE-2019-10018
reference_type
scores
0
value 4.3
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:N/I:N/A:P
1
value 5.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2019-10018
13
reference_url https://usn.ubuntu.com/4042-1/
reference_id USN-4042-1
reference_type
scores
url https://usn.ubuntu.com/4042-1/
fixed_packages
0
url pkg:deb/debian/poppler@0.57.0-2?distro=trixie
purl pkg:deb/debian/poppler@0.57.0-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.57.0-2%3Fdistro=trixie
1
url pkg:deb/debian/poppler@20.09.0-3.1%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/poppler@20.09.0-3.1%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-48d5-zxmm-r3g4
1
vulnerability VCID-a8zz-dfdm-1uf7
2
vulnerability VCID-anb3-1s96-wbaq
3
vulnerability VCID-ygrf-gq35-fkfd
4
vulnerability VCID-yy6j-1h5z-wbgp
5
vulnerability VCID-yyxy-juya-a3f1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@20.09.0-3.1%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/poppler@22.12.0-2%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/poppler@22.12.0-2%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-48d5-zxmm-r3g4
1
vulnerability VCID-a8zz-dfdm-1uf7
2
vulnerability VCID-anb3-1s96-wbaq
3
vulnerability VCID-ygrf-gq35-fkfd
4
vulnerability VCID-yy6j-1h5z-wbgp
5
vulnerability VCID-yyxy-juya-a3f1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@22.12.0-2%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/poppler@25.03.0-5%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/poppler@25.03.0-5%2Bdeb13u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a8zz-dfdm-1uf7
1
vulnerability VCID-yy6j-1h5z-wbgp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@25.03.0-5%252Bdeb13u2%3Fdistro=trixie
4
url pkg:deb/debian/poppler@25.03.0-11.1?distro=trixie
purl pkg:deb/debian/poppler@25.03.0-11.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@25.03.0-11.1%3Fdistro=trixie
aliases CVE-2019-10018
risk_score 2.5
exploitability 0.5
weighted_severity 5.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ncat-8jz5-m7e5
7
url VCID-zgja-p6ey-2kex
vulnerability_id VCID-zgja-p6ey-2kex
summary
Multiple vulnerabilities have been found in Poppler, the worst of
    which could allow the execution of arbitrary code.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9408.json
reference_id
reference_type
scores
0
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9408.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-9408
reference_id
reference_type
scores
0
value 0.01046
scoring_system epss
scoring_elements 0.77441
published_at 2026-04-01T12:55:00Z
1
value 0.01046
scoring_system epss
scoring_elements 0.77565
published_at 2026-04-26T12:55:00Z
2
value 0.01046
scoring_system epss
scoring_elements 0.77524
published_at 2026-04-21T12:55:00Z
3
value 0.01046
scoring_system epss
scoring_elements 0.77559
published_at 2026-04-24T12:55:00Z
4
value 0.01046
scoring_system epss
scoring_elements 0.77447
published_at 2026-04-02T12:55:00Z
5
value 0.01046
scoring_system epss
scoring_elements 0.77472
published_at 2026-04-04T12:55:00Z
6
value 0.01046
scoring_system epss
scoring_elements 0.77453
published_at 2026-04-07T12:55:00Z
7
value 0.01046
scoring_system epss
scoring_elements 0.77482
published_at 2026-04-08T12:55:00Z
8
value 0.01046
scoring_system epss
scoring_elements 0.77492
published_at 2026-04-09T12:55:00Z
9
value 0.01046
scoring_system epss
scoring_elements 0.77517
published_at 2026-04-11T12:55:00Z
10
value 0.01046
scoring_system epss
scoring_elements 0.77498
published_at 2026-04-12T12:55:00Z
11
value 0.01046
scoring_system epss
scoring_elements 0.77495
published_at 2026-04-13T12:55:00Z
12
value 0.01046
scoring_system epss
scoring_elements 0.77534
published_at 2026-04-16T12:55:00Z
13
value 0.01046
scoring_system epss
scoring_elements 0.77531
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-9408
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14517
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14518
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14519
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14520
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14975
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14976
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14977
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15565
10
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9406
11
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9408
12
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9775
13
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9776
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9865
15
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 1.7
scoring_system cvssv2
scoring_elements AV:L/AC:L/Au:S/C:N/I:N/A:P
1
value 3.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
16
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1458702
reference_id 1458702
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1458702
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864009
reference_id 864009
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864009
18
reference_url https://security.gentoo.org/glsa/201801-17
reference_id GLSA-201801-17
reference_type
scores
url https://security.gentoo.org/glsa/201801-17
19
reference_url https://usn.ubuntu.com/3350-1/
reference_id USN-3350-1
reference_type
scores
url https://usn.ubuntu.com/3350-1/
fixed_packages
0
url pkg:deb/debian/poppler@0.57.0-2?distro=trixie
purl pkg:deb/debian/poppler@0.57.0-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.57.0-2%3Fdistro=trixie
1
url pkg:deb/debian/poppler@20.09.0-3.1%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/poppler@20.09.0-3.1%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-48d5-zxmm-r3g4
1
vulnerability VCID-a8zz-dfdm-1uf7
2
vulnerability VCID-anb3-1s96-wbaq
3
vulnerability VCID-ygrf-gq35-fkfd
4
vulnerability VCID-yy6j-1h5z-wbgp
5
vulnerability VCID-yyxy-juya-a3f1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@20.09.0-3.1%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/poppler@22.12.0-2%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/poppler@22.12.0-2%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-48d5-zxmm-r3g4
1
vulnerability VCID-a8zz-dfdm-1uf7
2
vulnerability VCID-anb3-1s96-wbaq
3
vulnerability VCID-ygrf-gq35-fkfd
4
vulnerability VCID-yy6j-1h5z-wbgp
5
vulnerability VCID-yyxy-juya-a3f1
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@22.12.0-2%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/poppler@25.03.0-5%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/poppler@25.03.0-5%2Bdeb13u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a8zz-dfdm-1uf7
1
vulnerability VCID-yy6j-1h5z-wbgp
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@25.03.0-5%252Bdeb13u2%3Fdistro=trixie
4
url pkg:deb/debian/poppler@25.03.0-11.1?distro=trixie
purl pkg:deb/debian/poppler@25.03.0-11.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@25.03.0-11.1%3Fdistro=trixie
aliases CVE-2017-9408
risk_score 1.5
exploitability 0.5
weighted_severity 3.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zgja-p6ey-2kex
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/poppler@0.57.0-2%3Fdistro=trixie