CVE-2020-36023

Katalog CVE

CVSS 6.5 · Medium EPSS 1,2%

Kerentanan Loop with Unreachable Exit Condition ('Infinite Loop') pada freedesktop poppler. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::cvtGlyph function.

Rincian

Terbit di NVD

11 Agustus 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 66,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gitlab.freedesktop.org/poppler/poppler/-/issues/1013 exploit · issue tracking · patch
• https://lists.debian.org/debian-lts-announce/2023/08/msg00017.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2025/04/msg00037.html