CVE catalog

CVE-2022-27811

ocrfeeder: CVE-2022-27811

[CVE catalog]

Severity
Medium
Source
[NVD] · [CVE record]
EPSS
3.25% · Oct 25, 2026

GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianocrfeedersid0.8.5-3fixed
Debianocrfeederforky0.8.5-3fixed
Debianocrfeederbookworm0.8.5-1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianocrfeedersourcesid0.8.5-1not yet assignedNot reported[1008320]
Debianocrfeedersourceforky0.8.5-1not yet assignedNot reported[1008320]
Debianocrfeedersourcebookworm0.8.5-1not yet assignedNot reported[1008320]

[Debian bug #1008320]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [ocrfeeder]Fixed
    Details (2)

    • 0.8.5-1 · all · bookworm

      Fixed · Fixed: 0.8.5-1

      dsa · ocrfeeder · debian · bookworm

    • 0.8.5-1 · all · bookworm

      Fixed · Fixed: 0.8.5-1

      dsa · ocrfeeder · debian · bookworm

Observed:

References

[Debian Security Tracker] · [FIRST EPSS]