Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 9: 2024-0260 Moderate: Poppler Denial of Service Advisory

mageia
Calendar Grey July 10, 2024
Dist Mageia Esm H88
Mageia has released new updates to poppler packages addressing the CVE-2024-6239 vulnerability to mitigate denial-of-service issues arising with pdfinfo.
A flaw was found in the Poppler's Pdfinfo utility

Summary

A flaw was found in the Poppler's Pdfinfo utility. This issue occurs when using -dests parameter with pdfinfo utility. By using certain malformed input files, an attacker could cause the utility to crash, leading to a denial of service. (CVE-2024-6239)

References

- https://bugs.mageia.org/show_bug.cgi?id=33382

- https://lists.suse.com/pipermail/sle-updates/2024-July/035847.html

- https://www.cve.org/CVERecord?id=CVE-2024-6239

Topics%20covered

Topics Covered

security advisory moderate denial of service vulnerability poppler mageia pdfinfo

Resolution

SRPMS

- 9/core/poppler-23.02.0-1.3.mga9

Publication date: 10 Jul 2024
URL: https://advisories.mageia.org/MGASA-2024-0260.html
Type: security
CVE: CVE-2024-6239

Topics%20covered

Topics Covered

security advisory moderate denial of service vulnerability poppler mageia pdfinfo

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here