xpdf: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 7

• Medium 5.5
  CVE-2023-26931 Rejected

  DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2022-30524. Reason: This record is a duplicate of CVE-2022-30524. Notes: Al…

  Feb 27, 2023
• Unscored —
  CVE-2023-26930

  Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc mallo…

  xpdf Alpine
  Apr 26, 2023
• Unscored —
  CVE-2023-26934 Rejected

  ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2019-9587. Reason: This record is a reservation duplicate of C…

  Apr 26, 2023
• Unscored —
  CVE-2023-26935 Rejected

  ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2019-9587. Reason: This record is a reservation duplicate of C…

  Apr 26, 2023
• Unscored —
  CVE-2023-26936 Rejected

  ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2019-9587. Reason: This record is a reservation duplicate of C…

  Apr 26, 2023
• Unscored —
  CVE-2023-26937 Rejected

  ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2019-9587. Reason: This record is a reservation duplicate of C…

  Apr 26, 2023
• Unscored —
  CVE-2023-26938 Rejected

  ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2019-9587. Reason: This record is a reservation duplicate of C…

  Apr 26, 2023

Revision history

1. 2023-04-26 #1

   Initiale Fassung

References

• PoC vom 2023-04-27
  https://github.com/huanglei3/xpdf_Stack-backtracking/blob/main/gmem_copyString
• PoC vom 2023-04-27
  https://github.com/huanglei3/xpdf_heapoverflow
• PoC vom 2023-04-27
  https://github.com/huanglei3/xpdf_Stack-backtracking/blob/main/object_copy
• PoC vom 2023-04-27
  https://note.youdao.com/ynoteshare/index.html?id=3e538317260c2d0a7a8af70140c63a0f&type=note&_time=1682579239360
• PoC vom 2023-04-27
  https://github.com/huanglei3/xpdf_Stack-backtracking/blob/main/Stack_backtracking_gstring
• Github Advisory Database vom 2023-04-26
  https://github.com/advisories/GHSA-rqfx-p88v-f7ff
• Github Advisory Database vom 2023-04-26
  https://github.com/advisories/GHSA-jw72-cmc9-886w
• Github Advisory Database vom 2023-04-26
  https://github.com/advisories/GHSA-j96r-2c7w-r3f2
• Github Advisory Database vom 2023-04-26
  https://github.com/advisories/GHSA-mmph-h7pj-hh4p
• Github Advisory Database vom 2023-04-26
  https://github.com/advisories/GHSA-g4vj-r7jx-86jx
• Github Advisory Database vom 2023-04-26
  https://github.com/advisories/GHSA-c7xr-8x4j-9789
• Github Advisory Database vom 2023-04-26
  https://github.com/advisories/GHSA-29j9-xmmx-g9r4