openEuler 20.03 LTS SP4 update for texlive-base
Security Bulletin
This security bulletin contains one low risk vulnerability.
1) NULL pointer dereference
EUVDB-ID: #VU96489
Risk: Low
CVSSv3.1: 3.8 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-46048
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in texk/web2c/pdftexdir/writet1.c. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.
MitigationInstall updates from vendor's repository.
Vulnerable software versionsopenEuler: 20.03 LTS SP4
texlive-yplan: before 20180414-33
texlive-xmltex: before 20180414-33
texlive-wordcount: before 20180414-33
texlive-vpe: before 20180414-33
texlive-urlbst: before 20180414-33
texlive-ulqda: before 20180414-33
texlive-typeoutfileinfo: before 20180414-33
texlive-tpic2pdftex: before 20180414-33
texlive-thumbpdf: before 20180414-33
texlive-texsis: before 20180414-33
texlive-texosquery: before 20180414-33
texlive-texloganalyser: before 20180414-33
texlive-texliveonfly: before 20180414-33
texlive-texlive.infra: before 20180414-33
texlive-texlive-scripts: before 20180414-33
texlive-texlive-en: before 20180414-33
texlive-texfot: before 20180414-33
texlive-texdoctk: before 20180414-33
texlive-texdoc: before 20180414-33
texlive-texdirflatten: before 20180414-33
texlive-texdiff: before 20180414-33
texlive-texdef: before 20180414-33
texlive-texcount: before 20180414-33
texlive-texconfig: before 20180414-33
texlive-tex4ebook: before 20180414-33
texlive-tetex: before 20180414-33
texlive-svn-multi: before 20180414-33
texlive-sty2dtx: before 20180414-33
texlive-srcredact: before 20180414-33
texlive-splitindex: before 20180414-33
texlive-rubik: before 20180414-33
texlive-pythontex: before 20180414-33
texlive-pygmentex: before 20180414-33
texlive-purifyeps: before 20180414-33
texlive-ptex2pdf: before 20180414-33
texlive-ptex-fontmaps: before 20180414-33
texlive-pst2pdf: before 20180414-33
texlive-pst-pdf: before 20180414-33
texlive-pmxchords: before 20180414-33
texlive-pkfix-helper: before 20180414-33
texlive-pkfix: before 20180414-33
texlive-pfarrei: before 20180414-33
texlive-petri-nets: before 20180414-33
texlive-perltex: before 20180414-33
texlive-pedigree-perl: before 20180414-33
texlive-pdfxup: before 20180414-33
texlive-pdflatexpicscale: before 20180414-33
texlive-pdfjam: before 20180414-33
texlive-pdfcrop: before 20180414-33
texlive-pdfbook2: before 20180414-33
texlive-pax: before 20180414-33
texlive-oberdiek: before 20180414-33
texlive-musixtex: before 20180414-33
texlive-multibibliography: before 20180414-33
texlive-mptopdf: before 20180414-33
texlive-mltex: before 20180414-33
texlive-mkpic: before 20180414-33
texlive-mkjobtexmf: before 20180414-33
texlive-mkgrkindex: before 20180414-33
texlive-mf2pt1: before 20180414-33
texlive-mex: before 20180414-33
texlive-mathspic: before 20180414-33
texlive-match_parens: before 20180414-33
texlive-makedtx: before 20180414-33
texlive-make4ht: before 20180414-33
texlive-lyluatex: before svn47584-33
texlive-lwarp: before 20180414-33
texlive-luaotfload: before 20180414-33
texlive-lua2dox: before 20180414-33
texlive-ltximg: before 20180414-33
texlive-ltxfileinfo: before 20180414-33
texlive-lollipop: before 20180414-33
texlive-listings-ext: before 20180414-33
texlive-listbib: before 20180414-33
texlive-lilyglyphs: before 20180414-33
texlive-latexpand: before 20180414-33
texlive-latexindent: before 20180414-33
texlive-latexfileversion: before 20180414-33
texlive-latexdiff: before 20180414-33
texlive-latex2nemeth: before 20180414-33
texlive-latex2man: before 20180414-33
texlive-latex-papersize: before 20180414-33
texlive-latex-git-log: before 20180414-33
texlive-latex: before 20180414-33
texlive-l3build: before 20180414-33
texlive-kotex-utils: before 20180414-33
texlive-jfmutil: before 20180414-33
texlive-jadetex: before 20180414-33
texlive-installfont: before 20180414-33
texlive-glyphlist: before 20180414-33
texlive-glossaries: before 20180414-33
texlive-getmap: before 20180414-33
texlive-fragmaster: before 20180414-33
texlive-fontools: before 20180414-33
texlive-fontinst: before 20180414-33
texlive-findhyph: before 20180414-33
texlive-fig4latex: before 20180414-33
texlive-exceltex: before 20180414-33
texlive-epstopdf: before 20180414-33
texlive-epspdf: before 20180414-33
texlive-eplain: before 20180414-33
texlive-ebong: before 20180414-33
texlive-dviinfox: before 20180414-33
texlive-dviasm: before 20180414-33
texlive-dtxgen: before 20180414-33
texlive-dosepsbin: before 20180414-33
texlive-diadia: before 20180414-33
texlive-de-macro: before 20180414-33
texlive-cyrillic: before 20180414-33
texlive-ctanupload: before 20180414-33
texlive-ctanify: before 20180414-33
texlive-ctan-o-mat: before 20180414-33
texlive-csplain: before 20180414-33
texlive-cslatex: before 20180414-33
texlive-crossrefware: before 20180414-33
texlive-convbkmk: before 20180414-33
texlive-context: before 20180414-33
texlive-checklistings: before 20180414-33
texlive-checkcites: before 20180414-33
texlive-cachepic: before 20180414-33
texlive-bundledoc: before 20180414-33
texlive-bibexport: before 20180414-33
texlive-bib2gls: before 20180414-33
texlive-authorindex: before 20180414-33
texlive-arara: before 20180414-33
texlive-amstex: before 20180414-33
texlive-adhocfilelist: before 20180414-33
texlive-accfonts: before 20180414-33
texlive-a2ping: before 20180414-33
texlive-xetex: before 20180414-33
texlive-xdvi: before 20180414-33
texlive-web: before 20180414-33
texlive-vlna: before 20180414-33
texlive-velthuis: before 20180414-33
texlive-uptex: before 20180414-33
texlive-ttfutils: before 20180414-33
texlive-tie: before 20180414-33
texlive-texware: before 20180414-33
texlive-tex4ht: before 20180414-33
texlive-tex: before 20180414-33
texlive-synctex: before 20180414-33
texlive-seetexk: before 20180414-33
texlive-ptex: before 20180414-33
texlive-pstools: before 20180414-33
texlive-ps2pk: before 20180414-33
texlive-pmx: before 20180414-33
texlive-pdftools: before 20180414-33
texlive-pdftex: before 20180414-33
texlive-patgen: before 20180414-33
texlive-omegaware: before 20180414-33
texlive-musixtnt: before 20180414-33
texlive-mfware: before 20180414-33
texlive-mflua: before 20180414-33
texlive-metapost: before 20180414-33
texlive-metafont: before 20180414-33
texlive-makeindex: before 20180414-33
texlive-m-tx: before 20180414-33
texlive-luatex: before 20180414-33
texlive-lib-devel: before 20180414-33
texlive-lib: before 20180414-33
texlive-lcdftypetools: before 20180414-33
texlive-lacheck: before 20180414-33
texlive-kpathsea: before 20180414-33
texlive-gsftopk: before 20180414-33
texlive-gregoriotex: before 20180414-33
texlive-fontware: before 20180414-33
texlive-dvisvgm: before 20180414-33
texlive-dvips: before 20180414-33
texlive-dvipos: before 20180414-33
texlive-dvipng: before 20180414-33
texlive-dvipdfmx: before 20180414-33
texlive-dviljk: before 20180414-33
texlive-dvidvi: before 20180414-33
texlive-dvicopy: before 20180414-33
texlive-dvi2tty: before 20180414-33
texlive-dtl: before 20180414-33
texlive-detex: before 20180414-33
texlive-cweb: before 20180414-33
texlive-ctie: before 20180414-33
texlive-cjkutils: before 20180414-33
texlive-chktex: before 20180414-33
texlive-bibtexu: before 20180414-33
texlive-bibtex8: before 20180414-33
texlive-bibtex: before 20180414-33
texlive-base-debugsource: before 20180414-33
texlive-base-debuginfo: before 20180414-33
texlive-axodraw2: before 20180414-33
texlive-autosp: before 20180414-33
texlive-aleph: before 20180414-33
texlive-afm2pl: before 20180414-33
texlive-base: before 20180414-33
CPE2.3 External linkshttp://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1998
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
