vulnerability

Amazon Linux 2023: CVE-2023-34872: Medium priority package update for poppler

Severity
5
CVSS
(AV:L/AC:M/Au:N/C:N/I:N/A:C)
Published
Jul 31, 2023
Added
Feb 17, 2025
Modified
Jul 10, 2025

Description

A vulnerability in Outline.cc for Poppler prior to 23.06.0 allows a remote attacker to cause a Denial of Service (DoS) (crash) via a crafted PDF file in OutlineItem::open.
A flaw was found in Poppler that allows a remote attacker to cause a Denial of Service (DoS) via a crafted PDF file in OutlineItem::open.

Solutions

amazon-linux-2023-upgrade-poppleramazon-linux-2023-upgrade-poppler-cppamazon-linux-2023-upgrade-poppler-cpp-debuginfoamazon-linux-2023-upgrade-poppler-cpp-develamazon-linux-2023-upgrade-poppler-debuginfoamazon-linux-2023-upgrade-poppler-debugsourceamazon-linux-2023-upgrade-poppler-develamazon-linux-2023-upgrade-poppler-glibamazon-linux-2023-upgrade-poppler-glib-debuginfoamazon-linux-2023-upgrade-poppler-glib-develamazon-linux-2023-upgrade-poppler-glib-docamazon-linux-2023-upgrade-poppler-utilsamazon-linux-2023-upgrade-poppler-utils-debuginfo
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.