Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-36023

Опубликовано: 11 авг. 2023
Источник: redhat
CVSS3: 5.5
EPSS Низкий

Описание

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::cvtGlyph function.

A flaw was found in the Poppler package. This flaw allows attackers to possibly cause a denial of service via a crafted .pdf file to the FoFiType1C::cvtGlyph function.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6popplerOut of support scope
Red Hat Enterprise Linux 7popplerOut of support scope
Red Hat Enterprise Linux 8gimp:flatpak/popplerWill not fix
Red Hat Enterprise Linux 8inkscape:flatpak/popplerWill not fix
Red Hat Enterprise Linux 8libreoffice:flatpak/popplerWill not fix
Red Hat Enterprise Linux 8popplerWill not fix
Red Hat Enterprise Linux 9inkscape:flatpak/popplerWill not fix
Red Hat Enterprise Linux 9libreoffice:flatpak/popplerWill not fix
Red Hat Enterprise Linux 9popplerNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-119
https://bugzilla.redhat.com/show_bug.cgi?id=2231510poppler: Stack-Overflow in `FoFiType1C::cvtGlyph`

EPSS

Процентиль: 21%
0.00068
Низкий

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 2 лет назад

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::cvtGlyph function.

CVSS3: 6.5
nvd
больше 2 лет назад

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::cvtGlyph function.

CVSS3: 6.5
debian
больше 2 лет назад

An issue was discovered in freedesktop poppler version 20.12.1, allows ...

CVSS3: 6.5
github
больше 2 лет назад

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::cvtGlyph function.

CVSS3: 6.5
fstec
около 5 лет назад

Уязвимость функции cvtGlyph компонента FoFiType1C библиотеки для отображения PDF-файлов Poppler, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 21%
0.00068
Низкий

5.5 Medium

CVSS3