CVE-2020-36023: Medium severity poppler data vulnerability
Published Aug 11, 2023
·Updated
An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::cvtGlyph function.
Affected Software
6 affected componentsFixes available
ubuntu/poppler<21.01.0
21.01.0
ubuntu/poppler<0.62.0-2ubuntu2.14+
0.62.0-2ubuntu2.14+
ubuntu/poppler<0.86.1-0ubuntu1.3
0.86.1-0ubuntu1.3
ubuntu/poppler<0.41.0-0ubuntu1.16+
0.41.0-0ubuntu1.16+
debian/poppler<=0.71.0-5, <=20.09.0-3.1+deb11u1
0.71.0-5+deb10u322.12.0-2
Freedesktop poppler=20.12.1
Remediation
Patch Available
Event History
Aug 11, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·11:50 PM
Description
Frequently Asked Questions
1
What is CVE-2020-36023?
CVE-2020-36023 is a vulnerability discovered in freedesktop poppler version 20.12.1.
2
How does CVE-2020-36023 impact the system?
CVE-2020-36023 allows remote attackers to cause a denial of service (DoS) through a crafted .pdf file.
3
Which software versions are affected by CVE-2020-36023?
freedesktop poppler version 20.12.1 is affected by CVE-2020-36023.
4
What is the severity of CVE-2020-36023?
The severity of CVE-2020-36023 is medium (CVSS score of 6.5).
5
How can I mitigate CVE-2020-36023?
To mitigate CVE-2020-36023, it is recommended to update to poppler version 0.62.0-2ubuntu2.14+ or higher.