SB2024092602 - Gentoo update for Xpdf
Published: September 26, 2024
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 21 secuirty vulnerabilities.
1) Infinite loop (CVE-ID: CVE-2018-7453)
The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.
Infinite recursion in AcroForm::scanField in AcroForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file due to lack of loop checking, as demonstrated by pdftohtml.
2) Input validation error (CVE-ID: CVE-2018-16369)
The vulnerability allows remote attackers to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can cause a denial of service (stack consumption) via a crafted pdf file, related to AcroForm::scanField, as demonstrated by pdftohtml.
3) Out-of-bounds write (CVE-ID: CVE-2022-30524)
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a boundary error when processing untrusted input in the TextLine class in TextOutputDev.cc. A remote attacker can trigger an out-of-bounds write and execute arbitrary code on the target system.
4) Allocation of Resources Without Limits or Throttling (CVE-ID: CVE-2022-30775)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to the affected application allocates excessive memory when presented with crafted input. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
5) Out-of-bounds write (CVE-ID: CVE-2022-33108)
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a boundary error when processing untrusted input within the Object::Copy class of object.cc files. A remote attacker can trigger an out-of-bounds write and execute arbitrary code on the target system.
6) Input validation error (CVE-ID: CVE-2022-36561)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a segmentation violation in the component /xpdf/AcroForm.cc:538. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
7) Use-after-free (CVE-ID: CVE-2022-38222)
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a use-after-free error in JBIG2Stream::close() located in JBIG2Stream.cc. A remote attacker can execute arbitrary code on the system.
8) Uncontrolled Recursion (CVE-ID: CVE-2022-38334)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to uncontrolled recursion in the function Catalog::countPageTree() at Catalog.cc. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
9) NULL pointer dereference (CVE-ID: CVE-2022-38928)
The vulnerability allows a remote attacker to execute arbitrary code on the system.
The vulnerability exists due to a NULL pointer dereference error in FoFiType1C.cc:2393. A remote attacker can pass specially crafted data to the application and execute arbitrary code on the target system.
10) Resource exhaustion (CVE-ID: CVE-2022-41842)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to application does not properly control consumption of internal resources in gfseek(_IO_FILE*, long, int) in goo/gfile.cc. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.
11) NULL pointer dereference (CVE-ID: CVE-2022-41843)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in convertToType0 in fofi/FoFiType1C.cc. A local user can pass specially crafted data to the application and perform a denial of service (DoS) attack.
12) Resource exhaustion (CVE-ID: CVE-2022-41844)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to application does not properly control consumption of internal resources in XRef::fetch(int, int, Object*, int) in xpdf/XRef.cc. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.
13) Out-of-bounds write (CVE-ID: CVE-2022-43071)
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a boundary error when processing untrusted input within the Catalog::readPageLabelTree2(Object*) function. A remote attacker can create a specially crafted file, trick the victim into opening it using the affected software, trigger an out-of-bounds write and execute arbitrary code on the target system.
14) Out-of-bounds write (CVE-ID: CVE-2022-43295)
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a boundary error when processing untrusted input within the FileStream::copy() function in xpdf/Stream.cc. A remote attacker can create a specially crafted file, trick the victim into opening it using the affected software, trigger an out-of-bounds write and execute arbitrary code on the target system.
15) Stack-based buffer overflow (CVE-ID: CVE-2022-45586)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error within the Dict::find() function in xpdf/Dict.cc. A remote attacker can pass a specially crafted PDF file to the application, trigger a stack overflow and crash the application.
16) Out-of-bounds write (CVE-ID: CVE-2022-45587)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error when processing PDF file. A remote attacker can pass a specially crafted PDF file to the application, trigger an out-of-bounds write and crash the application.
17) Division by zero (CVE-ID: CVE-2023-2662)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a divide by zero error when processing PDF files. A remote attacker can pass a specially crafted PDF file to the application, trigger a division by zero error and crash the application.18) Infinite loop (CVE-ID: CVE-2023-2663)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to infinite loop. A remote attacker can consume all available system resources and cause denial of service conditions.
19) Infinite loop (CVE-ID: CVE-2023-2664)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to infinite loop. A remote attacker can consume all available system resources and cause denial of service conditions.
20) Division by zero (CVE-ID: CVE-2023-3044)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a divide by zero error when processing PDF files. A remote attacker can pass a specially crafted PDF file to the application, trigger a division by zero error and crash the application.
21) Deadlock (CVE-ID: CVE-2023-3436)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a deadlock on a PDF object stream whose "Length" field is itself in another object stream. A remote attacker can pass specially crafted PDF files to the application and perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.