Vulnerability CVE-2022-45587: Information

Description

Stack overflow vulnerability in function gmalloc in goo/gmem.cc in xpdf 4.04, allows local attackers to cause a denial of service.

Severity: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Published: Feb. 15, 2023
Modified: Feb. 24, 2023
Error type identifier: CWE-787

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
xpdfsisyphus4.05-alt14.05-alt1ALT-PU-2024-7465-3347491Fixed
xpdfsisyphus_e2k4.05-alt14.05-alt1ALT-PU-2024-7502-1-Fixed
xpdfsisyphus_riscv644.05-alt14.05-alt1ALT-PU-2024-7493-1-Fixed
xpdfsisyphus_loongarch644.05-alt14.05-alt1ALT-PU-2024-7487-1-Fixed
xpdfp104.05-alt14.04-alt1ALT-PU-2024-7467-2347494Testing

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://forum.xpdfreader.com/viewtopic.php?t=42361
  • Exploit
  • Third Party Advisory
    1. Configuration 1

      cpe:2.3:a:xpdfreader:xpdf:4.04:*:*:*:*:*:*:*