CVE-2023-34872
MediumAdvisory
Published 31 Jul 2023In the index since 8 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.009
- 58th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 7
- of 17,781 indexed, latest versions
- Container images
- 7
- deployed by those charts
- Fix available
- 1 of 1
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 7 of 17,781 indexed charts deploy, on 7 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| popplerdeb | 22.02.0-2, 22.02.0-2ubuntu0.1, 22.12.0-2+b1 | 22.02.0-2ubuntu0.2, 22.12.0-2+deb12u1 | 7 |
- OSV records
- DEBIAN-CVE-2023-34872UBUNTU-CVE-2023-34872
- Also known as
- USN-6273-1
Charts affected
7 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| paperless-ngxcrystalnetVerified publisher | 0.2.22 | 1 of 3See more | 13,761 |
| astrotrekastria | 0.0.2 | 1 of 4See more | 32,501 |
| codecovdoubanVerified publisher | 0.2.4 | 1 of 8See more | 24,917 |
| drogue-cloud-examplesdrogue-iotVerified publisher | 0.7.11 | 1 of 6See more | 30,699 |
| scanservjsgabe565Verified publisher | 0.9.2 | 1 of 1See more | 13,241 |
| paperlesshomelabcihelmchartstestVerified publisher | 9.1.9 | 1 of 1See more | 16,384 |
| maybe-financevicsuferVerified publisher | 0.2.7 | 1 of 3See more | 10,795 |
Container images carrying it
7 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| sbs20/ | dad1fd6e9a98 | poppler | 22.12.0-2+deb12u1 | 1 |
| timescale/ | a8e3322e1cf9 | poppler | 22.02.0-2ubuntu0.2 | 1 |
| timescale/ | cdb9ae118899 | poppler | 22.02.0-2ubuntu0.2 | 1 |
| timescale/ | ed719c0cd19d | poppler | 22.02.0-2ubuntu0.2 | 1 |
| ghcr.io/ | c6ab95ca9130 | poppler | 22.12.0-2+deb12u1 | 1 |
| ghcr.io/ | 0642357c5dbd | poppler | 22.12.0-2+deb12u1 | 1 |
| ghcr.io/ | ab255bea133e | poppler | 22.12.0-2+deb12u1 | 1 |