CVE-2005-2097: xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a deni

Routine

LOW 2.1MITIGATEDOWNGRADE

CVE-2005-2097 is a low-severity flaw (CVSS 2.1) affecting kpdf, xpdf. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information.

Why this priority

No elevated risk signals yet

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	2.1 (Low)
EPSS exploit chance	0.4% (top 63%)
CISA exploited list	No
Published	2005-08-16
Last modified	2026-06-16

Publisher (CNA): Red Hat, Inc. · Vendor: kde · xpdf

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2005-08-16 04:00 UTCPublished CVE record published
2026-06-16 22:14 UTCUpdated Record last modified

kde kpdf MITIGATE

Affected: all versions

Fixed in: no fixed release known

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy kpdf || rpm -q kpdf || kpdf --version

No fixed or unaffected release known

Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.

xpdf xpdf DOWNGRADE

Affected: 3.0 · 3.0_pl2 · 3.0_pl3

Fixed in: no fixed release known

Safe to downgrade to: a release before 3.0

1. Check installed version

apt-cache policy xpdf || rpm -q xpdf || xpdf --version

2. No fixed release: DOWNGRADE to a release before 3.0 (Debian / Ubuntu)

apt-cache madison xpdf sudo apt install xpdf=<VERSION_BEFORE_3.0> sudo apt-mark hold xpdf

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list xpdf sudo dnf downgrade xpdf-<VERSION_BEFORE_3.0> sudo dnf versionlock add xpdf

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2005-2097?

kpdf: mitigate or apply the listed mitigation; xpdf: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2005-2097 being exploited?

CVE-2005-2097 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2005-2097 affect?

CVE-2005-2097 affects kpdf, xpdf. Severity is low (CVSS 2.1). xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a "broken" loca table, which causes a large temporary file to be cre

How urgent is CVE-2005-2097?

Priority 17/100. No elevated risk signals yet.

Related CVEs

CVE-2009-4035 HIGH 9.3 DOWNGRADE DOWNGRADE The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and p
CVE-2005-3626 MEDIUM 5.0 DOWNGRADE DOWNGRADE Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allow
CVE-2005-3625 HIGH 10.0 DOWNGRADE DOWNGRADE Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allow
CVE-2005-3624 MEDIUM 5.0 DOWNGRADE DOWNGRADE The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS
CVE-2005-0206 HIGH 7.5 DOWNGRADE DOWNGRADE The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit ar

References

← Back to latest CVEs