Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
amazonAmazonALAS2-2023-2282
HistorySep 27, 2023 - 10:49 p.m.

Medium: poppler

2023-09-2722:49:00
alas.aws.amazon.com
7
poppler
pdfinfo
pdftops
denial of service
crafted input
cve-2020-23804

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.2%

JSON

Issue Overview:

Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input. (CVE-2020-23804)

Affected Packages:

poppler

Note:

This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.

Issue Correction:
Run yum update poppler to update your system.

New Packages:

aarch64:  
    poppler-0.26.5-43.amzn2.1.6.aarch64  
    poppler-devel-0.26.5-43.amzn2.1.6.aarch64  
    poppler-glib-0.26.5-43.amzn2.1.6.aarch64  
    poppler-glib-devel-0.26.5-43.amzn2.1.6.aarch64  
    poppler-qt-0.26.5-43.amzn2.1.6.aarch64  
    poppler-qt-devel-0.26.5-43.amzn2.1.6.aarch64  
    poppler-cpp-0.26.5-43.amzn2.1.6.aarch64  
    poppler-cpp-devel-0.26.5-43.amzn2.1.6.aarch64  
    poppler-utils-0.26.5-43.amzn2.1.6.aarch64  
    poppler-demos-0.26.5-43.amzn2.1.6.aarch64  
    poppler-debuginfo-0.26.5-43.amzn2.1.6.aarch64  
  
i686:  
    poppler-0.26.5-43.amzn2.1.6.i686  
    poppler-devel-0.26.5-43.amzn2.1.6.i686  
    poppler-glib-0.26.5-43.amzn2.1.6.i686  
    poppler-glib-devel-0.26.5-43.amzn2.1.6.i686  
    poppler-qt-0.26.5-43.amzn2.1.6.i686  
    poppler-qt-devel-0.26.5-43.amzn2.1.6.i686  
    poppler-cpp-0.26.5-43.amzn2.1.6.i686  
    poppler-cpp-devel-0.26.5-43.amzn2.1.6.i686  
    poppler-utils-0.26.5-43.amzn2.1.6.i686  
    poppler-demos-0.26.5-43.amzn2.1.6.i686  
    poppler-debuginfo-0.26.5-43.amzn2.1.6.i686  
  
src:  
    poppler-0.26.5-43.amzn2.1.6.src  
  
x86_64:  
    poppler-0.26.5-43.amzn2.1.6.x86_64  
    poppler-devel-0.26.5-43.amzn2.1.6.x86_64  
    poppler-glib-0.26.5-43.amzn2.1.6.x86_64  
    poppler-glib-devel-0.26.5-43.amzn2.1.6.x86_64  
    poppler-qt-0.26.5-43.amzn2.1.6.x86_64  
    poppler-qt-devel-0.26.5-43.amzn2.1.6.x86_64  
    poppler-cpp-0.26.5-43.amzn2.1.6.x86_64  
    poppler-cpp-devel-0.26.5-43.amzn2.1.6.x86_64  
    poppler-utils-0.26.5-43.amzn2.1.6.x86_64  
    poppler-demos-0.26.5-43.amzn2.1.6.x86_64  
    poppler-debuginfo-0.26.5-43.amzn2.1.6.x86_64

Additional References

Red Hat: CVE-2020-23804

Mitre: CVE-2020-23804

OSVersionArchitecturePackageVersionFilename
Amazon Linux2aarch64poppler< 0.26.5-43.amzn2.1.6poppler-0.26.5-43.amzn2.1.6.aarch64.rpm
Amazon Linux2aarch64poppler-devel< 0.26.5-43.amzn2.1.6poppler-devel-0.26.5-43.amzn2.1.6.aarch64.rpm
Amazon Linux2aarch64poppler-glib< 0.26.5-43.amzn2.1.6poppler-glib-0.26.5-43.amzn2.1.6.aarch64.rpm
Amazon Linux2aarch64poppler-glib-devel< 0.26.5-43.amzn2.1.6poppler-glib-devel-0.26.5-43.amzn2.1.6.aarch64.rpm
Amazon Linux2aarch64poppler-qt< 0.26.5-43.amzn2.1.6poppler-qt-0.26.5-43.amzn2.1.6.aarch64.rpm
Amazon Linux2aarch64poppler-qt-devel< 0.26.5-43.amzn2.1.6poppler-qt-devel-0.26.5-43.amzn2.1.6.aarch64.rpm
Amazon Linux2aarch64poppler-cpp< 0.26.5-43.amzn2.1.6poppler-cpp-0.26.5-43.amzn2.1.6.aarch64.rpm
Amazon Linux2aarch64poppler-cpp-devel< 0.26.5-43.amzn2.1.6poppler-cpp-devel-0.26.5-43.amzn2.1.6.aarch64.rpm
Amazon Linux2aarch64poppler-utils< 0.26.5-43.amzn2.1.6poppler-utils-0.26.5-43.amzn2.1.6.aarch64.rpm
Amazon Linux2aarch64poppler-demos< 0.26.5-43.amzn2.1.6poppler-demos-0.26.5-43.amzn2.1.6.aarch64.rpm
Rows per page:
1-10 of 331

Related

nessus 8
prion 1
veracode 1
ubuntucve 1
nvd 1
cvelist 1
osv 4
amazon 1
debiancve 1
cve 1
redhatcve 1
debian 1
openvas 8
ubuntu 2
hp 1
nessus
nessus
Amazon Linux 2 : poppler (ALAS-2023-2282)
2023-10-05 00:00:00
Amazon Linux AMI : poppler (ALAS-2023-1852)
2023-10-06 00:00:00
Debian DLA-3620-1 : poppler - LTS security update
2023-10-16 00:00:00
prion
prion
Input validation
2023-08-22 19:16:00
veracode
veracode
Denial Of Service (DoS)
2023-10-09 12:23:07
ubuntucve
ubuntucve
CVE-2020-23804
2023-08-22 00:00:00
nvd
nvd
CVE-2020-23804
2023-08-22 19:16:19
cvelist
cvelist
CVE-2020-23804
2023-08-22 00:00:00
osv
osv
CVE-2020-23804
2023-08-22 19:16:19
poppler - security update
2023-10-16 00:00:00
poppler regression
2023-11-28 13:11:44
amazon
amazon
Medium: poppler
2023-09-27 22:15:00
debiancve
debiancve
CVE-2020-23804
2023-08-22 19:16:19
cve
cve
CVE-2020-23804
2023-08-22 19:16:19
redhatcve
redhatcve
CVE-2020-23804
2023-08-24 18:45:53
debian
debian
[SECURITY] [DLA 3620-1] poppler security update
2023-10-16 11:41:13
openvas
openvas
Debian: Security Advisory (DLA-3620-1)
2023-10-17 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:3998-1)
2023-10-09 00:00:00
Ubuntu: Security Advisory (USN-6508-1)
2023-11-24 00:00:00
ubuntu
ubuntu
poppler vulnerabilities
2023-11-23 00:00:00
poppler regression
2023-11-28 00:00:00
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.2%

JSON
Related for ALAS2-2023-2282
nessus8prion1veracode1ubuntucve1nvd1cvelist1osv4amazon1debiancve1cve1redhatcve1debian1openvas8ubuntu2hp1