xpdf: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 3

• Medium 5.5
  CVE-2022-41842

  An issue was discovered in Xpdf 4.04. There is a crash in gfseek(_IO_FILE*, long, int) in goo/gfile.cc.

  ipe xpdf Ubuntu Alpine
  Sep 30, 2022
• Medium 5.5
  CVE-2022-41843

  An issue was discovered in Xpdf 4.04. There is a crash in convertToType0 in fofi/FoFiType1C.cc, a different vulnerabili…

  ipe xpdf Ubuntu Alpine
  Sep 30, 2022
• Medium 5.5
  CVE-2022-41844

  An issue was discovered in Xpdf 4.04. There is a crash in XRef::fetch(int, int, Object*, int) in xpdf/XRef.cc, a differ…

  ipe xpdf Ubuntu Alpine
  Sep 30, 2022

Revision history

1. 2024-09-24 #2

   Neue Updates von Gentoo aufgenommen

2. 2022-09-29 #1

   Initiale Fassung

References

• NIST Vulnerability Database vom 2022-09-29
  https://nvd.nist.gov/vuln/detail/CVE-2022-41842
• NIST Vulnerability Database vom 2022-09-29
  https://nvd.nist.gov/vuln/detail/CVE-2022-41843
• NIST Vulnerability Database vom 2022-09-29
  https://nvd.nist.gov/vuln/detail/CVE-2022-41844
• PoC auf forum.xpdfreader.com
  https://forum.xpdfreader.com/viewtopic.php?f=1&t=42340&p=43928&hilit=gfseek#p43928
• PoC auf forum.xpdfreader.com
  https://forum.xpdfreader.com/viewtopic.php?f=1&t=42344
• Gentoo Linux Security Advisory GLSA-202409-25 vom 2024-09-25
  https://security.gentoo.org/glsa/202409-25