Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-36023

Fixed in a distro release EPSS 1%

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::cvtGlyph function.

Published 2023-08-11 · CVE record · OSV

Products: freedesktop poppler

Distro releases

ReleasePackageFixed in
Amazon Linux 2poppler0.26.5-43.amzn2.1.5
Amazon Linux 2poppler-cpp0.26.5-43.amzn2.1.5
Amazon Linux 2poppler-cpp-devel0.26.5-43.amzn2.1.5
Amazon Linux 2poppler-demos0.26.5-43.amzn2.1.5
Amazon Linux 2poppler-devel0.26.5-43.amzn2.1.5
Amazon Linux 2poppler-glib0.26.5-43.amzn2.1.5
Amazon Linux 2poppler-glib-devel0.26.5-43.amzn2.1.5
Amazon Linux 2poppler-qt0.26.5-43.amzn2.1.5
Amazon Linux 2poppler-qt-devel0.26.5-43.amzn2.1.5
Amazon Linux 2poppler-utils0.26.5-43.amzn2.1.5
Debian 10poppler0.71.0-5+deb10u2
Debian 11poppler20.09.0-3.1+deb11u2
Debian 12poppler22.08.0-2
Debian 13poppler22.08.0-2
Debian 14poppler22.08.0-2
SUSE Linux Enterprise Module for Basesystem 15 SP4poppler0.79.0-150200.3.26.1
SUSE Linux Enterprise Module for Basesystem 15 SP5poppler0.79.0-150200.3.26.1
SUSE Linux Enterprise Server 12 SP5poppler0.43.0-16.40.1
SUSE Linux Enterprise Server 12 SP5poppler-qt0.43.0-16.40.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5poppler0.43.0-16.40.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5poppler-qt0.43.0-16.40.1
SUSE Linux Enterprise Software Development Kit 12 SP5poppler0.43.0-16.40.1
SUSE Linux Enterprise Software Development Kit 12 SP5poppler0.24.4-14.41.1
SUSE Linux Enterprise Software Development Kit 12 SP5poppler-qt0.43.0-16.40.1
SUSE Manager Proxy 4.2poppler0.79.0-150200.3.26.1
SUSE Manager Server 4.2poppler0.79.0-150200.3.26.1
Ubuntu 20.04 LTSpoppler0.86.1-0ubuntu1.3
Ubuntu Pro 16.04 LTSpoppler0.41.0-0ubuntu1.16+esm3
Ubuntu Pro 18.04 LTSpoppler0.62.0-2ubuntu2.14+esm1
openSUSE Leap 15.4poppler0.79.0-150200.3.26.1
openSUSE Leap 15.4poppler0.62.0-150000.4.28.2