CVE-2022-27337

medium
Published 2022-11-15 · Modified 2022-11-18
CVSS v3
CVSS v2
VIR risk
5.5

Description

Moderate: poppler security and bug fix update

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/9/ALSA-2022-8151.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/8/ALSA-2022-7594.html

vendor Authored 2026-05-27

Vendor advisory: alma — https://bugzilla.redhat.com/2087190

vendor Authored 2026-05-27

Vendor advisory: alma — https://access.redhat.com/errata/RHSA-2022:7594

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2022-27337

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2022:8151

vendor Authored 2026-05-27

Vendor advisory: suse — https://www.suse.com/security/cve/CVE-2022-27337.html

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2022:7594

vendor Authored 2026-05-27

Vendor advisory: redhat — https://access.redhat.com/errata/RHSA-2022:8151

OS impact

OSVersionStatusFixed in
arch archfixed22.08.0-2
redhat rhel9fixed
rockylinux rocky8fixed
suse slesaffected
rockylinux rocky9fixed
debian debianbookwormfixed22.08.0-2
debian debianbullseyefixed20.09.0-3.1+deb11u1
debian debianforkyfixed22.08.0-2
debian debiansidfixed22.08.0-2
debian debiantrixiefixed22.08.0-2

References

Verify integrity in audit chain (admin only). AS-IS.