CVE-2024-6239
Poppler: pdfinfo: crash in broken documents when using -dests parameter
Summary
Poppler: pdfinfo: crash in broken documents when using -dests parameter
Original description
The description as published by the source.
A flaw was found in the Poppler's Pdfinfo utility. This issue occurs when using -dests parameter with pdfinfo utility. By using certain malformed input files, an attacker could cause the utility to crash, leading to a denial of service.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2024-6239 poppler Fixed in: 24.02.0-r2
- Debian DEBIAN-CVE-2024-6239 poppler
References
- advisory access.redhat.com
- advisory access.redhat.com
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- package gitlab.freedesktop.org
- report bugzilla.redhat.com
- web access.redhat.com