There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - In Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to be
    changed after the first scan of the image, leading to an unknown integer-related vulnerability in
    Stream.cc. (CVE-2022-24106)

  - Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc. (CVE-2022-24107)

  - Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder
    (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially crafted PDF file or JBIG2
    image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability
    described by CVE-2021-30860 (Apple CoreGraphics). (CVE-2022-38171)

CentOS Linux 7 主機安裝的套件會受到 TuxCare CENTOS7：CLSA-2026：1786352279 公告中提及的多個弱點影響。

  - 4.04 版之前的 Xpdf 在 JBIG2 解碼器中含有一個整數溢位 (JBIG2Stream.cc 中的 JBIG2Stream::readTextRegionSeg())。處理特製的 PDF 檔案或 JBIG2 影像可觸發程式損毀或任意程式碼執行攻擊。這與 CVE-2021-30860 (Apple CoreGraphics) 中所述 Xpdf 中的弱點類似。(CVE-2022-38171)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端主機受到 GLSA-202405-18 中所述的弱點影響 (Xpdf：多個弱點)

  - 在 Xpdf 4.02 中，SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 嘗試使用已釋放的「t3GlyphStack->cache」，進而造成「釋放後堆積使用」問題。先前巢狀 Type 3 字元修正的程式碼未正確處理 Type 3 字元參照相同 Type 3 字型中另一個字元的情況。(CVE-2020-25725)

  - Xpdf 4.02 允許堆疊消耗，因為 Type 1C 字型字元字串中的子常式參照不正確，與 FoFiType1C::getOp() 函式有關。(CVE-2020-35376)

  - xpdf 中 XFAScanner.cc 的 XFAScanner::scanNode() 函式有一個 Null 指標解除參照弱點 4.03。(CVE-2021-27548)

  - 在 4.04 之前的 Xpdf 中，DCT (JPEG) 解碼器未正確允許在第一次掃描影像後變更「interleaved」旗標，進而導致 Stream.cc 中出現未知整數相關弱點。(CVE-2022-24106)

  - 4.04 之前的 Xpdf 在 JPXStream.cc 中缺少整數溢位檢查。(CVE-2022-24107)

  - xpdf 4.03 的 XRef.cc 中的 readXRefTable 函式有堆積緩衝區溢位問題。攻擊者可惡意利用此錯誤，透過將特製的 PDF 檔案傳送至 pdftoppm 二進位檔，造成拒絕服務 (分割錯誤) 或其他不明影響。(CVE-2022-27135)

  - 4.04 版之前的 Xpdf 在 JBIG2 解碼器中含有一個整數溢位 (JBIG2Stream.cc 中的 JBIG2Stream::readTextRegionSeg())。處理特製的 PDF 檔案或 JBIG2 影像可觸發程式損毀或任意程式碼執行攻擊。這與 CVE-2021-30860 (Apple CoreGraphics) 中所述 Xpdf 中的弱點類似。(CVE-2022-38171)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - 4.04 版之前的 Xpdf 在 JBIG2 解碼器中含有一個整數溢位 (JBIG2Stream.cc 中的 JBIG2Stream::readTextRegionSeg())。處理特製的 PDF 檔案或 JBIG2 影像可觸發程式損毀或任意程式碼執行攻擊。這與 CVE-2021-30860 (Apple CoreGraphics) 中所述 Xpdf 中的弱點類似。(CVE-2022-38171)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

CentOS Linux 7 主机上存在安装的程序包，该程序包受到 TuxCare CENTOS7：CLSA-2026：1786352279公告中提及的多个漏洞的影响。

  - 低于版本 4.04 的 Xpdf 在 JBIG2 解码器（JBIG2Stream.cc 中的 JBIG2Stream::readTextRegionSeg()）中包含整数溢出。处理特别构建的 PDF 文件或 JBIG2 图像可导致崩溃或执行任意代码。这类似于 CVE-2021-30860 (Apple CoreGraphics) 所述的漏洞。(CVE-2022-38171)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程主机受到 GLSA-202405-18 中所述漏洞的影响（Xpdf：多个漏洞）

  - 在 Xpdf 4.02 中，SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 尝试使用已释放的“t3GlyphStack->cache”，造成“heap-use-after-free”问题。之前用于修复嵌套 Type 3 字符的代码未正确处理 Type 3 字符引用相同 Type 3 字体的另一个字符的情况。 (CVE-2020-25725)

  - 由于 Type 1C 字体 charstring 中与 FoFiType1C::getOp() 函数相关的不正确子例程引用，Xpdf 4.02 允许堆栈消耗。(CVE-2020-35376)

  - 在 xpdf 4.03 中，XFAScanner.cc 的 XFAScanner::scanNode() 函数中存在一个空指针取消引用漏洞。(CVE-2021-27548)

  - 在 4.04 之前的 Xpdf 中，DCT (JPEG) 解码器错误地允许在首次扫描图像后更改“interleaved”标记，从而在 Stream.cc 中导致一个与整数相关的未知漏洞。(CVE-2022-24106)

  - 4.04 之前的 Xpdf 在 JPXStream.cc 中缺少整数溢出检查。(CVE-2022-24107)

  - xpdf 4.03 在 XRef.cc 的函数 readXRefTable 中存在堆缓冲区溢出。攻击者可通过向 pdftoppm 二进制发送特制的 PDF 文件，利用此缺陷造成拒绝服务（分段错误）或其他不明影响。(CVE-2022-27135)

  - 低于版本 4.04 的 Xpdf 在 JBIG2 解码器（JBIG2Stream.cc 中的 JBIG2Stream::readTextRegionSeg()）中包含整数溢出。处理特别构建的 PDF 文件或 JBIG2 图像可导致崩溃或执行任意代码。这类似于 CVE-2021-30860 (Apple CoreGraphics) 所述的漏洞。(CVE-2022-38171)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 低于版本 4.04 的 Xpdf 在 JBIG2 解码器（JBIG2Stream.cc 中的 JBIG2Stream::readTextRegionSeg()）中包含整数溢出。处理特别构建的 PDF 文件或 JBIG2 图像可导致崩溃或执行任意代码。这类似于 CVE-2021-30860 (Apple CoreGraphics) 所述的漏洞。(CVE-2022-38171)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

CentOS Linux 7ホストには、TuxCare CENTOS7:CLSA-2026:1786352279アドバイザリに記載されている複数の脆弱性の影響を受けるパッケージがインストールされています。

  - バージョン 4.04 より前の Xpdf には、JBIG2 デコーダーに整数オーバーフローが含まれています(JBIG2Stream.cc の JBIG2Stream::readTextRegionSeg())。特別に細工された PDF ファイルまたは JBIG2 画像を処理すると、クラッシュしたり、任意のコードが実行されたりする可能性があります。これは、 CVE-2021-30860 (Apple CoreGraphics)で説明されている脆弱性と類似しています。(CVE-2022-38171)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - バージョン 4.04 より前の Xpdf には、JBIG2 デコーダー JBIG2Stream.cc の JBIG2Stream::readTextRegionSeg() に整数オーバーフローがあります。特別に細工された PDF ファイルまたは JBIG2 画像を処理すると、クラッシュしたり、任意のコードが実行されたりする可能性があります。これは、 CVE-2021-30860 Apple CoreGraphics 氏によって説明されている脆弱性に類似しています。CVE-2022-38171

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:1071 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2023-34872:
    A vulnerability in Outline.cc for Poppler prior to 23.06.0 allows a remote attacker to cause a Denial of     Service (DoS) (crash) via a crafted PDF file in OutlineItem::open.

    CVE-2022-38784:
    Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder     (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2     image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability     described by CVE-2022-38171 in Xpdf.

    CVE-2022-38171:
    Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder     (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially crafted PDF file or JBIG2     image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability     described by CVE-2021-30860 (Apple CoreGraphics).

    CVE-2022-38349:
    An issue was discovered in Poppler 22.08.0. There is a reachable assertion in Object.h, will lead to     denial of service because PDFDoc::replacePageDict in PDFDoc.cc lacks a stream check before saving an     embedded file.

    CVE-2021-30860:
    An integer overflow was addressed with improved input validation. This issue is fixed in Security Update     2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously     crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this issue may have been     actively exploited.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1786352279 advisory.

  - Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder     (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially crafted PDF file or JBIG2     image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability     described by CVE-2021-30860 (Apple CoreGraphics). (CVE-2022-38171)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202405-18 (Xpdf: Multiple Vulnerabilities)

  - In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to use the     freed `t3GlyphStack->cache`, which causes an `heap-use-after-free` problem. The codes of a previous fix     for nested Type 3 characters wasn't correctly handling the case where a Type 3 char referred to another     char in the same Type 3 font. (CVE-2020-25725)

  - Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font     charstring, related to the FoFiType1C::getOp() function. (CVE-2020-35376)

  - There is a Null Pointer Dereference vulnerability in the XFAScanner::scanNode() function in XFAScanner.cc     in xpdf 4.03. (CVE-2021-27548)

  - In Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to be     changed after the first scan of the image, leading to an unknown integer-related vulnerability in     Stream.cc. (CVE-2022-24106)

  - Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc. (CVE-2022-24107)

  - xpdf 4.03 has heap buffer overflow in the function readXRefTable located in XRef.cc. An attacker can     exploit this bug to cause a Denial of Service (Segmentation fault) or other unspecified effects by sending     a crafted PDF file to the pdftoppm binary. (CVE-2022-27135)

  - Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder     (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially crafted PDF file or JBIG2     image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability     described by CVE-2021-30860 (Apple CoreGraphics). (CVE-2022-38171)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder     (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially crafted PDF file or JBIG2     image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability     described by CVE-2021-30860 (Apple CoreGraphics). (CVE-2022-38171)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名稱	產品	系列	已發布	已更新	嚴重性
427693	Alpine: multiple xpdf packages: security update to 4.04-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2025/5/16	2026/7/2	high
427693	Alpine: multiple xpdf packages: security update to 4.04-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2025/5/16	2026/7/2	high
353225	CentOS Linux 7 [TuxCare] 安全性更新：poppler / poppler-cpp / poppler-cpp-devel / poppler-demos / etc 多個漏洞（CENTOS7：CLSA-2026：1786352279）	Nessus	CentOS Local Security Checks	2026/9/30	2026/10/22	high
195087	GLSA-202405-18: Xpdf: 多個弱點	Nessus	Gentoo Local Security Checks	2024/5/7	2024/5/7	high
260589	Linux Distros 未修補的弱點：CVE-2022-38171	Nessus	Misc.	2025/9/2	2026/10/17	high
353225	CentOS Linux 7 [TuxCare] 安全更新：poppler / poppler-cpp / poppler-cpp-devel / poppler-demos / 等多个漏洞（CENTOS7：CLSA-2026：1786352279）	Nessus	CentOS Local Security Checks	2026/9/30	2026/10/22	high
195087	GLSA-202405-18 ：xpdf ：多个漏洞	Nessus	Gentoo Local Security Checks	2024/5/7	2024/5/7	high
260589	Linux Distros 未修补的漏洞：CVE-2022-38171	Nessus	Misc.	2025/9/2	2026/10/17	high
353225	CentOS Linux 7 [TuxCare] セキュリティ更新プログラム:poppler/poppler-cpp/poppler-cpp-devel/poppler-demos/etc複数の脆弱性(CENTOS7:CLSA-2026:1786352279)	Nessus	CentOS Local Security Checks	2026/9/30	2026/10/22	high
260589	Linux Distros のパッチ未適用の脆弱性: CVE-2022-38171	Nessus	Misc.	2025/9/2	2026/10/17	high
239083	TencentOS Server 4: poppler (TSSA-2024:1071)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/23	high
353225	CentOS Linux 7 [TuxCare] Security Update: poppler / poppler-cpp / poppler-cpp-devel / poppler-demos / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1786352279)	Nessus	CentOS Local Security Checks	2026/9/30	2026/10/22	high
195087	GLSA-202405-18 : Xpdf: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	2024/5/7	2024/5/7	high
260589	Linux Distros Unpatched Vulnerability : CVE-2022-38171	Nessus	Misc.	2025/9/2	2026/10/17	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high

high

high

high

high

high

high

high