The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5606-1 advisory.

    It was discovered that poppler incorrectly handled certain PDF. An attacker could possibly use this issue     to cause a denial of service or execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-f79aa2bae9 advisory.

    Security fix for CVE-2022-38784

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the poppler packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder     (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2     image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability     described by CVE-2022-38171 in Xpdf. (CVE-2022-38784)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8643:05 advisory.

    * CVE-2022-38784: fix integer overflow in JBIG2 decoder     CVE(s):
    CVE-2022-38784     Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder     (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2     image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability     described by CVE-2022-38171 in Xpdf.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0147 advisory.

    This advisory aggregates security fixes for the poppler SRPM in CIQ LTS 8.6. It addresses 14 CVEs:
    CVE-2017-14520, CVE-2010-3703, CVE-2022-24795, CVE-2017-9865, CVE-2017-9776, and 9 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
164950	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : poppler vulnerability (USN-5606-1)	Nessus	Ubuntu Local Security Checks	2022/9/12	2024/8/29	high
169186	Fedora 36 : poppler (2022-f79aa2bae9)	Nessus	Fedora Local Security Checks	2022/12/23	2024/11/14	high
172299	EulerOS 2.0 SP5 : poppler (EulerOS-SA-2023-1512)	Nessus	Huawei Local Security Checks	2023/3/8	2023/8/31	high
292304	MiracleLinux 7 : poppler-0.26.5-43.1.0.1.el7.AXS7 (AXSA:2024-8643:05)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
355789	Rocky Linux 8.6 [CIQ] Security Update: poppler / poppler-cpp / poppler-cpp-debuginfo / poppler-cpp-devel / etc Multiple Vulnerabilities (ciqsa-2026_0147)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/11	high

检测

插件搜索

high

high

high

high

high