Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-6239: A flaw was found in the Poppler's Pdfinfo utility. This issue occurs when using -dests parameter with pdfinfo utility. By using certain malformed input files, an attacker could cause the utility to crash, leading to a denial of service.
Fixed packages 13
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | poppler | 0:22.08.0-3.amzn2023.0.5 |
| Amazon Linux · 2023 | poppler-cpp | 0:22.08.0-3.amzn2023.0.5 |
| Amazon Linux · 2023 | poppler-cpp-debuginfo | 0:22.08.0-3.amzn2023.0.5 |
| Amazon Linux · 2023 | poppler-cpp-devel | 0:22.08.0-3.amzn2023.0.5 |
| Amazon Linux · 2023 | poppler-debuginfo | 0:22.08.0-3.amzn2023.0.5 |
| Amazon Linux · 2023 | poppler-debugsource | 0:22.08.0-3.amzn2023.0.5 |
| Amazon Linux · 2023 | poppler-devel | 0:22.08.0-3.amzn2023.0.5 |
| Amazon Linux · 2023 | poppler-glib | 0:22.08.0-3.amzn2023.0.5 |
| Amazon Linux · 2023 | poppler-glib-debuginfo | 0:22.08.0-3.amzn2023.0.5 |
| Amazon Linux · 2023 | poppler-glib-devel | 0:22.08.0-3.amzn2023.0.5 |
| Amazon Linux · 2023 | poppler-glib-doc | 0:22.08.0-3.amzn2023.0.5 |
| Amazon Linux · 2023 | poppler-utils | 0:22.08.0-3.amzn2023.0.5 |
| Amazon Linux · 2023 | poppler-utils-debuginfo | 0:22.08.0-3.amzn2023.0.5 |
Vulnerabilities 1
-
High 7.5
Poppler: pdfinfo: crash in broken documents when using -dests parameter
A flaw was found in the Poppler's Pdfinfo utility. This issue occurs when using -dests parameter with pdfinfo utility. By using certain malformed input files, an attacker could cause the utility to crash, leading to a denial of service.
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-6239.html