SB2023032424 - Multiple vulnerabilities in xpdf

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2023032424

SB2023032424 - Multiple vulnerabilities in xpdf

Published: March 24, 2023 Updated: March 24, 2023

Security Bulletin ID SB2023032424
Severity
High
Patch available
NO
Number of vulnerabilities 11
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 36% Medium 55% Low 9%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 11 secuirty vulnerabilities.


1) Uncontrolled Recursion (CVE-ID: CVE-2019-16088)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to uncontrolled recursion in PDF objects. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.


2) Out-of-bounds write (CVE-ID: CVE-2022-33108)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error when processing untrusted input within the Object::Copy class of object.cc files. A remote attacker can trigger an out-of-bounds write and execute arbitrary code on the target system.


3) Input validation error (CVE-ID: CVE-2022-36561)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a segmentation violation in the component /xpdf/AcroForm.cc:538. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.


4) Uncontrolled Recursion (CVE-ID: CVE-2022-38334)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to uncontrolled recursion in the function Catalog::countPageTree() at Catalog.cc. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.


5) Resource exhaustion (CVE-ID: CVE-2022-41842)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to application does not properly control consumption of internal resources in gfseek(_IO_FILE*, long, int) in goo/gfile.cc. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.


6) Resource exhaustion (CVE-ID: CVE-2022-41844)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to application does not properly control consumption of internal resources in XRef::fetch(int, int, Object*, int) in xpdf/XRef.cc. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.


7) NULL pointer dereference (CVE-ID: CVE-2022-41843)

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in convertToType0 in fofi/FoFiType1C.cc. A local user can pass specially crafted data to the application and perform a denial of service (DoS) attack.


8) Use-after-free (CVE-ID: CVE-2022-38222)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error in JBIG2Stream::close() located in JBIG2Stream.cc. A remote attacker can execute arbitrary code on the system.


9) Allocation of Resources Without Limits or Throttling (CVE-ID: CVE-2022-30775)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to the affected application allocates excessive memory when presented with crafted input. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.


10) NULL pointer dereference (CVE-ID: CVE-2022-38928)

The vulnerability allows a remote attacker to execute arbitrary code on the system.

The vulnerability exists due to a NULL pointer dereference error in FoFiType1C.cc:2393. A remote attacker can pass specially crafted data to the application and execute arbitrary code on the target system.


11) Out-of-bounds write (CVE-ID: CVE-2022-30524)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error when processing untrusted input in the TextLine class in TextOutputDev.cc. A remote attacker can trigger an out-of-bounds write and execute arbitrary code on the target system.


Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References