vulnerability

Amazon Linux AMI 2: CVE-2021-25786: Security patch for qpdf (ALAS-2024-2409)

Severity
4
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
Published
Aug 11, 2023
Added
Jan 10, 2024
Modified
Jan 10, 2024

Description

An issue was discovered in QPDF version 10.0.4, allows remote attackers to execute arbitrary code via crafted .pdf file to Pl_ASCII85Decoder::write parameter in libqpdf.

Solution(s)

amazon-linux-ami-2-upgrade-qpdfamazon-linux-ami-2-upgrade-qpdf-debuginfoamazon-linux-ami-2-upgrade-qpdf-develamazon-linux-ami-2-upgrade-qpdf-docamazon-linux-ami-2-upgrade-qpdf-libs
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.