Vulnerability CVE-2023-3436: Information
Description
Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream.
Severity: LOW (3.3) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Fixed packages
Package name | Branch | Fixed in version | Version from repository | Errata ID | Task # | State |
---|---|---|---|---|---|---|
xpdf | sisyphus | 4.05-alt1 | 4.05-alt1 | ALT-PU-2024-7465-3 | 347491 | Fixed |
xpdf | sisyphus_e2k | 4.05-alt1 | 4.05-alt1 | ALT-PU-2024-7502-1 | - | Fixed |
xpdf | sisyphus_riscv64 | 4.05-alt1 | 4.05-alt1 | ALT-PU-2024-7493-1 | - | Fixed |
xpdf | sisyphus_loongarch64 | 4.05-alt1 | 4.05-alt1 | ALT-PU-2024-7487-1 | - | Fixed |
xpdf | p10 | 4.05-alt1 | 4.04-alt1 | ALT-PU-2024-7467-2 | 347494 | Testing |
References to Advisories, Solutions, and Tools
Hyperlink | Resource |
---|---|
https://forum.xpdfreader.com/viewtopic.php?t=42618 |
|