CVE-2020-23804 - poppler: uncontrolled recursion in pdfinfo and pdftops

HIGH

poppler: uncontrolled recursion in pdfinfo and pdftops

Published Aug 22, 2023

7.5

HIGH

CVSS 3.1

EPSS 1.15%

Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input.

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	poppler	Not affected	n/a
Red Hat Enterprise Linux 7	compat-poppler022	Not affected	n/a
Red Hat Enterprise Linux 7	poppler	Not affected	n/a
Red Hat Enterprise Linux 8	cups-container	Not affected	n/a
Red Hat Enterprise Linux 8	gimp-flatpak-container	Not affected	n/a
Red Hat Enterprise Linux 8	gimp:flatpak/poppler	Not affected	n/a
Red Hat Enterprise Linux 8	poppler	Not affected	n/a
Red Hat Enterprise Linux 9	cups-container	Not affected	n/a
Red Hat Enterprise Linux 9	inkscape:flatpak/poppler	Not affected	n/a
Red Hat Enterprise Linux 9	libreoffice-flatpak-container	Not affected	n/a
Red Hat Enterprise Linux 9	libreoffice:flatpak/poppler	Not affected	n/a
Red Hat Enterprise Linux 9	poppler	Not affected	n/a

No remediation recorded yet.

Weaknesses (2)

CWE-400

Uncontrolled Resource Consumption

CWE-674

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2020-23804		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2234526		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-16544		Advisory
https://gitlab.freedesktop.org/poppler/poppler/-/issues/936		ExploitIssue TrackingPatchVendor Advisory
https://lists.debian.org/debian-lts-announce/2023/10/msg00022.html		mailing-listMailing ListThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-23804
https://www.cve.org/CVERecord?id=CVE-2020-23804