Lucene search
MitreCVE-2022-37052HistoryAug 22, 2023 - 7:16 p.m.
CVE-2022-37052
2023-08-2219:16:23
CWE-617
mitre
web.nvd.nist.gov
179
cve-2022-37052
object::getstring assertion
poppler 22.07.0
denial of service
markobject
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
6.2
Confidence
High
EPSS
0.001
Percentile
31.6%
A reachable Object::getString assertion in Poppler 22.07.0 allows attackers to cause a denial of service due to a failure in markObject.
Affected configurations
Node
freedesktoppopplerMatch22.07.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| freedesktop | poppler | 22.07.0 | cpe:2.3:a:freedesktop:poppler:22.07.0:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2022-37052
2023-08-22 19:16:23
redhatcve
redhatcve
CVE-2022-37052
2023-08-24 19:15:36
veracode
veracode
Denial Of Service (DoS)
2023-10-10 12:43:25
osv
osv
CVE-2022-37052
2023-08-22 19:16:23
poppler vulnerabilities
2023-11-23 02:47:28
poppler regression
2023-11-28 13:11:44
debiancve
debiancve
CVE-2022-37052
2023-08-22 19:16:23
ubuntucve
ubuntucve
CVE-2022-37052
2023-08-22 00:00:00
prion
prion
Design/Logic Flaw
2023-08-22 19:16:00
cvelist
cvelist
CVE-2022-37052
2023-08-22 00:00:00
openvas
openvas
openSUSE: Security Advisory for poppler (SUSE-SU-2023:4363-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for poppler (SUSE-SU-2023:4270-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for poppler (SUSE-SU-2023:4562-1)
2024-03-04 00:00:00
nessus
nessus
openSUSE 15 Security Update : poppler (SUSE-SU-2023:4270-1)
2023-10-31 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : poppler (SUSE-SU-2023:4363-1)
2023-11-04 00:00:00
RHEL 9 : poppler (Unpatched Vulnerability)
2024-06-03 00:00:00
redos
redos
ROS-20230918-04
2023-09-18 00:00:00
ubuntu
ubuntu
poppler vulnerabilities
2023-11-23 00:00:00
poppler regression
2023-11-28 00:00:00
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
6.2
Confidence
High
EPSS
0.001
Percentile
31.6%
Related for CVE-2022-37052