ALPINE-CVE-2024-6239

Source
https://security.alpinelinux.org/vuln/CVE-2024-6239
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2024-6239.json
JSON Data
https://api.test.osv.dev/v1/vulns/ALPINE-CVE-2024-6239
Upstream
Published
2024-06-21T14:15:14Z
Modified
2025-09-26T00:37:15.166309Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

A flaw was found in the Poppler's Pdfinfo utility. This issue occurs when using -dests parameter with pdfinfo utility. By using certain malformed input files, an attacker could cause the utility to crash, leading to a denial of service.

References

Affected packages

Alpine:v3.21 / poppler

Package

Name
poppler
Purl
pkg:apk/alpine/poppler?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
24.02.0-r2

Affected versions

0.*

0.10.7-r0
0.12.0-r0
0.12.0-r1
0.12.1-r0
0.12.2-r0
0.12.3-r0
0.12.3-r1
0.12.3-r2
0.12.4-r0
0.12.4-r1
0.14.0-r0
0.14.0-r1
0.14.3-r0
0.14.4-r0
0.14.5-r0
0.16.0-r0
0.16.2-r0
0.16.3-r0
0.16.4-r0
0.16.4-r1
0.16.5-r0
0.16.7-r0
0.18.0-r0
0.18.1-r0
0.18.2-r0
0.18.3-r0
0.18.4-r0
0.20.0-r0
0.20.1-r0
0.20.2-r0
0.20.3-r0
0.20.3-r1
0.20.5-r0
0.22.0-r0
0.22.1-r0
0.22.1-r1
0.24.2-r0
0.24.2-r1
0.24.2-r2
0.24.3-r0
0.24.4-r0
0.24.5-r0
0.26.3-r0
0.26.4-r0
0.26.5-r0
0.28.1-r0
0.29.0-r0
0.32.0-r0
0.33.0-r0
0.37.0-r0
0.38.0-r0
0.39.0-r0
0.40.0-r0
0.41.0-r0
0.43.0-r0
0.43.0-r1
0.47.0-r0
0.47.0-r1
0.48.0-r0
0.50.0-r0
0.52.0-r0
0.54.0-r0
0.56.0-r0
0.56.0-r1
0.71.0-r0
0.80.0-r0
0.81.0-r0
0.82.0-r0
0.82.0-r1
0.86.1-r0
0.87.0-r0
0.88.0-r0
0.89.0-r0
0.90.0-r0
0.90.1-r0

20.*

20.09.0-r0
20.10.0-r0
20.11.0-r0
20.12.0-r0
20.12.1-r0

21.*

21.01.0-r0
21.02.0-r0
21.03.0-r0
21.04.0-r0
21.05.0-r0
21.06.1-r0
21.07.0-r0
21.08.0-r0
21.09.0-r0
21.10.0-r0
21.11.0-r0
21.12.0-r0
21.12.0-r1
21.12.0-r2

22.*

22.03.0-r0
22.05.0-r0
22.06.0-r0
22.07.0-r0
22.08.0-r0
22.09.0-r0
22.10.0-r0
22.11.0-r0
22.12.0-r0
22.12.0-r1
22.12.0-r2

23.*

23.01.0-r0
23.02.0-r0
23.03.0-r0
23.03.0-r1
23.04.0-r0
23.04.0-r1
23.04.0-r2
23.04.0-r3
23.05.0-r0
23.06.0-r0
23.07.0-r0
23.07.0-r1
23.09.0-r0
23.10.0-r0
23.12.0-r0

24.*

24.01.0-r0
24.02.0-r0
24.02.0-r1

Alpine:v3.22 / poppler

Package

Name
poppler
Purl
pkg:apk/alpine/poppler?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
24.02.0-r2

Affected versions

0.*

0.10.7-r0
0.12.0-r0
0.12.0-r1
0.12.1-r0
0.12.2-r0
0.12.3-r0
0.12.3-r1
0.12.3-r2
0.12.4-r0
0.12.4-r1
0.14.0-r0
0.14.0-r1
0.14.3-r0
0.14.4-r0
0.14.5-r0
0.16.0-r0
0.16.2-r0
0.16.3-r0
0.16.4-r0
0.16.4-r1
0.16.5-r0
0.16.7-r0
0.18.0-r0
0.18.1-r0
0.18.2-r0
0.18.3-r0
0.18.4-r0
0.20.0-r0
0.20.1-r0
0.20.2-r0
0.20.3-r0
0.20.3-r1
0.20.5-r0
0.22.0-r0
0.22.1-r0
0.22.1-r1
0.24.2-r0
0.24.2-r1
0.24.2-r2
0.24.3-r0
0.24.4-r0
0.24.5-r0
0.26.3-r0
0.26.4-r0
0.26.5-r0
0.28.1-r0
0.29.0-r0
0.32.0-r0
0.33.0-r0
0.37.0-r0
0.38.0-r0
0.39.0-r0
0.40.0-r0
0.41.0-r0
0.43.0-r0
0.43.0-r1
0.47.0-r0
0.47.0-r1
0.48.0-r0
0.50.0-r0
0.52.0-r0
0.54.0-r0
0.56.0-r0
0.56.0-r1
0.71.0-r0
0.80.0-r0
0.81.0-r0
0.82.0-r0
0.82.0-r1
0.86.1-r0
0.87.0-r0
0.88.0-r0
0.89.0-r0
0.90.0-r0
0.90.1-r0

20.*

20.09.0-r0
20.10.0-r0
20.11.0-r0
20.12.0-r0
20.12.1-r0

21.*

21.01.0-r0
21.02.0-r0
21.03.0-r0
21.04.0-r0
21.05.0-r0
21.06.1-r0
21.07.0-r0
21.08.0-r0
21.09.0-r0
21.10.0-r0
21.11.0-r0
21.12.0-r0
21.12.0-r1
21.12.0-r2

22.*

22.03.0-r0
22.05.0-r0
22.06.0-r0
22.07.0-r0
22.08.0-r0
22.09.0-r0
22.10.0-r0
22.11.0-r0
22.12.0-r0
22.12.0-r1
22.12.0-r2

23.*

23.01.0-r0
23.02.0-r0
23.03.0-r0
23.03.0-r1
23.04.0-r0
23.04.0-r1
23.04.0-r2
23.04.0-r3
23.05.0-r0
23.06.0-r0
23.07.0-r0
23.07.0-r1
23.09.0-r0
23.10.0-r0
23.12.0-r0

24.*

24.01.0-r0
24.02.0-r0
24.02.0-r1