Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2020-23804
HistoryAug 22, 2023 - 7:16 p.m.

CVE-2020-23804

2023-08-2219:16:19
CWE-674
[email protected]
web.nvd.nist.gov
8
denial of service
remote attackers
crafted input

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

51.4%

JSON

Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input.

Affected configurations

Nvd
Node
freedesktoppopplerMatch0.89.0
Node
debiandebian_linuxMatch10.0
VendorProductVersionCPE
freedesktoppoppler0.89.0cpe:2.3:a:freedesktop:poppler:0.89.0:*:*:*:*:*:*:*
debiandebian_linux10.0cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Related

amazon 2
nessus 9
ubuntucve 1
veracode 1
prion 1
cvelist 1
debiancve 1
osv 4
cve 1
redhatcve 1
openvas 8
debian 1
ubuntu 2
hp 1
amazon
amazon
Medium: poppler
2023-09-27 22:49:00
Medium: poppler
2023-09-27 22:15:00
nessus
nessus
Amazon Linux 2 : poppler (ALAS-2023-2282)
2023-10-05 00:00:00
Amazon Linux AMI : poppler (ALAS-2023-1852)
2023-10-06 00:00:00
Debian DLA-3620-1 : poppler - LTS security update
2023-10-16 00:00:00
ubuntucve
ubuntucve
CVE-2020-23804
2023-08-22 00:00:00
veracode
veracode
Denial Of Service (DoS)
2023-10-09 12:23:07
prion
prion
Input validation
2023-08-22 19:16:00
cvelist
cvelist
CVE-2020-23804
2023-08-22 00:00:00
debiancve
debiancve
CVE-2020-23804
2023-08-22 19:16:19
osv
osv
CVE-2020-23804
2023-08-22 19:16:19
poppler - security update
2023-10-16 00:00:00
poppler regression
2023-11-28 13:11:44
cve
cve
CVE-2020-23804
2023-08-22 19:16:19
redhatcve
redhatcve
CVE-2020-23804
2023-08-24 18:45:53
openvas
openvas
Debian: Security Advisory (DLA-3620-1)
2023-10-17 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:3982-1)
2023-10-06 00:00:00
Ubuntu: Security Advisory (USN-6508-2)
2023-11-30 00:00:00
debian
debian
[SECURITY] [DLA 3620-1] poppler security update
2023-10-16 11:41:13
ubuntu
ubuntu
poppler regression
2023-11-28 00:00:00
poppler vulnerabilities
2023-11-23 00:00:00
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

51.4%

JSON
Related for NVD:CVE-2020-23804
amazon2nessus9ubuntucve1veracode1prion1cvelist1debiancve1osv4cve1redhatcve1openvas8debian1ubuntu2hp1