vulnerability
Amazon Linux AMI 2: CVE-2021-25786: Security patch for qpdf (ALAS-2024-2409)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:L/AC:M/Au:N/C:P/I:P/A:P) | Aug 11, 2023 | Jan 10, 2024 | Jan 10, 2024 |
Severity
4
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
Published
Aug 11, 2023
Added
Jan 10, 2024
Modified
Jan 10, 2024
Description
An issue was discovered in QPDF version 10.0.4, allows remote attackers to execute arbitrary code via crafted .pdf file to Pl_ASCII85Decoder::write parameter in libqpdf.
Solution(s)
amazon-linux-ami-2-upgrade-qpdfamazon-linux-ami-2-upgrade-qpdf-debuginfoamazon-linux-ami-2-upgrade-qpdf-develamazon-linux-ami-2-upgrade-qpdf-docamazon-linux-ami-2-upgrade-qpdf-libs
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.