Medium ALAS2-2023-2282 1 CVE

Moderate: poppler security update (Amazon Linux 2)

Published Sep 27, 2023 · Updated Oct 5, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-23804: Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input.

Fixed packages 11

Release	Package	Fixed in
Amazon Linux · 2	poppler	0:0.26.5-43.amzn2.1.6
Amazon Linux · 2	poppler-cpp	0:0.26.5-43.amzn2.1.6
Amazon Linux · 2	poppler-cpp-devel	0:0.26.5-43.amzn2.1.6
Amazon Linux · 2	poppler-debuginfo	0:0.26.5-43.amzn2.1.6
Amazon Linux · 2	poppler-demos	0:0.26.5-43.amzn2.1.6
Amazon Linux · 2	poppler-devel	0:0.26.5-43.amzn2.1.6
Amazon Linux · 2	poppler-glib	0:0.26.5-43.amzn2.1.6
Amazon Linux · 2	poppler-glib-devel	0:0.26.5-43.amzn2.1.6
Amazon Linux · 2	poppler-qt	0:0.26.5-43.amzn2.1.6
Amazon Linux · 2	poppler-qt-devel	0:0.26.5-43.amzn2.1.6
Amazon Linux · 2	poppler-utils	0:0.26.5-43.amzn2.1.6

Vulnerabilities 1

Unscored —

CVE-2020-23804

Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service v…

poppler poppler Debian Ubuntu

Aug 22, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2020-23804.html