USN-6299-1: poppler vulnerabilities
It was discovered that poppler incorrectly handled certain malformed PDF files. If a user or an automated system were tricked into opening a specially crafted PDF file, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2020-36023, CVE-2020-36024)
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for the poppler vulnerability?
The vulnerability ID for the poppler vulnerability is CVE-2020-36023 and CVE-2020-36024.
What is the affected software for the poppler vulnerability?
The affected software for the poppler vulnerability is libpoppler97 (version 0.86.1-0ubuntu1.3) on Ubuntu 20.04, libpoppler73 (version 0.62.0-2ubuntu2.14+esm1) on Ubuntu 18.04, and libpoppler58 (version 0.41.0-0ubuntu1.16+esm3) on Ubuntu 16.04.
How can the poppler vulnerability be exploited?
The poppler vulnerability can be exploited by tricking a user or an automated system into opening a specially crafted PDF file. This can potentially cause a denial of service.
How can I fix the poppler vulnerability?
To fix the poppler vulnerability, update libpoppler97 to version 0.86.1-0ubuntu1.3 on Ubuntu 20.04, libpoppler73 to version 0.62.0-2ubuntu2.14+esm1 on Ubuntu 18.04, and libpoppler58 to version 0.41.0-0ubuntu1.16+esm3 on Ubuntu 16.04.
Where can I find more information about the poppler vulnerability?
You can find more information about the poppler vulnerability on the Ubuntu Security website or the provided reference links.