CVE-2020-23804
published 2023-08-22CVE-2020-23804: Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input.
PriorityP434high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.89%
54.9th percentile
Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | poppler | < poppler 20.09.0-1 (bookworm) | poppler 20.09.0-1 (bookworm) |
| freedesktop | poppler | — | — |
| freedesktop | poppler | >= 0 < 20.09.0-1 | 20.09.0-1 |
| freedesktop | poppler | >= 0 < 20.09.0-1 | 20.09.0-1 |
| freedesktop | poppler | >= 0 < 20.09.0-1 | 20.09.0-1 |
| freedesktop | poppler | >= 0 < 20.09.0-1 | 20.09.0-1 |
| freedesktop | poppler | >= 0 < 0.86.1-0ubuntu1.4 | 0.86.1-0ubuntu1.4 |
| freedesktop | poppler | >= 0 < 22.02.0-2ubuntu0.3 | 22.02.0-2ubuntu0.3 |
| freedesktop | poppler | >= 0 < 0.41.0-0ubuntu1.16+esm4 | 0.41.0-0ubuntu1.16+esm4 |
| freedesktop | poppler | >= 0 < 0.62.0-2ubuntu2.14+esm3 | 0.62.0-2ubuntu2.14+esm3 |
| freedesktop | poppler | >= 0 < 0.62.0-2ubuntu2.14+esm2 | 0.62.0-2ubuntu2.14+esm2 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
vendor_ubuntu7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
poppler regression
vendor_ubuntu·2023-11-28·CVSS 7.5
[HIGH] poppler regression
Title: poppler regression
Summary: USN-6508-1 caused some minor regressions in poppler.
USN-6508-1 fixed vulnerabilities in poppler. The update introduced
one minor regression in Ubuntu 18.04 LTS. This update fixes the
problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that poppler incorrectly handled certain malformed PDF
files. If a user or an automated system were tricked into opening a
specially crafted PDF file, a remote attacker could possibly use this
issue to cause a denial of service. This issue only affected Ubuntu 16.04
LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-23804)
It was discovered that poppler incorrectly handled certain malformed PDF
files. If a user or an automated system were tricked into opening a
specially crafte
Ubuntu
poppler vulnerabilities
vendor_ubuntu·2023-11-23·CVSS 7.5
CVE-2022-37051 [HIGH] poppler vulnerabilities
Title: poppler vulnerabilities
Summary: Several security issues were fixed in poppler.
It was discovered that poppler incorrectly handled certain malformed PDF
files. If a user or an automated system were tricked into opening a
specially crafted PDF file, a remote attacker could possibly use this
issue to cause a denial of service. This issue only affected Ubuntu 16.04
LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-23804)
It was discovered that poppler incorrectly handled certain malformed PDF
files. If a user or an automated system were tricked into opening a
specially crafted PDF file, a remote attacker could possibly use this
issue to cause a denial of service. (CVE-2022-37050, CVE-2022-37051,
CVE-2022-37052, CVE-2022-38349)
Instructions: In general, a standard system update
Red Hat
poppler: uncontrolled recursion in pdfinfo and pdftops
vendor_redhat·2020-06-29·CVSS 7.5
CVE-2020-23804 [HIGH] CWE-400 poppler: uncontrolled recursion in pdfinfo and pdftops
poppler: uncontrolled recursion in pdfinfo and pdftops
Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input.
A vulnerability was found in Poppler, where a uncontrolled recursion in pdfinfo, and pdftops allows remote attackers to cause a denial of service via crafted input.
Package: poppler (Red Hat Enterprise Linux 6) - Not affected
Package: compat-poppler022 (Red Hat Enterprise Linux 7) - Not affected
Package: poppler (Red Hat Enterprise Linux 7) - Not affected
Package: cups-container (Red Hat Enterprise Linux 8) - Not affected
Package: gimp-flatpak-container (Red Hat Enterprise Linux 8) - Not affected
Package: gimp:flatpak/poppler (Red Hat Enterprise Linux 8) - Not affected
Package: poppler (Red H
Debian
CVE-2020-23804: poppler - Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote a...
vendor_debian·2020·CVSS 7.5
CVE-2020-23804 [HIGH] CVE-2020-23804: poppler - Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote a...
Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input.
Scope: local
bookworm: resolved (fixed in 20.09.0-1)
bullseye: resolved (fixed in 20.09.0-1)
forky: resolved (fixed in 20.09.0-1)
sid: resolved (fixed in 20.09.0-1)
trixie: resolved (fixed in 20.09.0-1)
OSV
poppler regression
osv·2023-11-28·CVSS 7.5
[HIGH] poppler regression
poppler regression
USN-6508-1 fixed vulnerabilities in poppler. The update introduced
one minor regression in Ubuntu 18.04 LTS. This update fixes the
problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that poppler incorrectly handled certain malformed PDF
files. If a user or an automated system were tricked into opening a
specially crafted PDF file, a remote attacker could possibly use this
issue to cause a denial of service. This issue only affected Ubuntu 16.04
LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-23804)
It was discovered that poppler incorrectly handled certain malformed PDF
files. If a user or an automated system were tricked into opening a
specially crafted PDF file, a remote attacker could possibly use this
issue to cause a
OSV
poppler vulnerabilities
osv·2023-11-23·CVSS 7.5
CVE-2020-23804 [HIGH] poppler vulnerabilities
poppler vulnerabilities
It was discovered that poppler incorrectly handled certain malformed PDF
files. If a user or an automated system were tricked into opening a
specially crafted PDF file, a remote attacker could possibly use this
issue to cause a denial of service. This issue only affected Ubuntu 16.04
LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-23804)
It was discovered that poppler incorrectly handled certain malformed PDF
files. If a user or an automated system were tricked into opening a
specially crafted PDF file, a remote attacker could possibly use this
issue to cause a denial of service. (CVE-2022-37050, CVE-2022-37051,
CVE-2022-37052, CVE-2022-38349)
GHSA
GHSA-cwfg-vhjr-jvv6: Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0
ghsa_unreviewed·2023-08-22
CVE-2020-23804 [HIGH] CWE-674 GHSA-cwfg-vhjr-jvv6: Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0
Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input.
OSV
CVE-2020-23804: Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0
osv·2023-08-22·CVSS 7.5
CVE-2020-23804 [HIGH] CVE-2020-23804: Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0
Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-08-22
Published