CVE-2023-32668

🗓️ 11 May 2023 06:10:15Reported by mitreType

LuaTeX before 1.17.0 allows arbitrary network requests due to default socket library acces

Reporter	Title	Published	Views	Family All 16
UbuntuCve	CVE-2023-32668	11 May 202300:00	–	ubuntucve
Prion	Default configuration	11 May 202306:15	–	prion
OSV	CVE-2023-32668	11 May 202306:15	–	osv
OSV	texlive-bin - security update	29 Oct 202400:00	–	osv
OSV	libkpathsea6-6.3.5-90.1 on GA media	15 Jun 202400:00	–	osv
OSV	texlive-bin vulnerabilities	14 Mar 202411:45	–	osv
Debian CVE	CVE-2023-32668	11 May 202306:15	–	debiancve
NVD	CVE-2023-32668	11 May 202306:15	–	nvd
Cvelist	CVE-2023-32668	11 May 202300:00	–	cvelist
Debian	[SECURITY] [DLA 3941-1] texlive-bin security update	30 Oct 202408:56	–	debian

Nvd

Node

luatex_project luatexRange0.27.0–1.17.0

miktex miktexRange2.9.0–23.5

tug tex_liveRange2009–2023

Source	Link
tug	www.tug.org/~mseven/luatex.html
tug	www.tug.org/pipermail/tex-live/2023-May/049188.html
gitlab	www.gitlab.lisn.upsaclay.fr/texlive/luatex/-/tags/1.17.0
gitlab	www.gitlab.lisn.upsaclay.fr/texlive/luatex/-/blob/b266ef076c96b382cd23a4c93204e247bb98626a/source/texk/web2c/luatexdir/ChangeLog

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

11 May 2023 06:15Current

5.7Medium risk

Vulners AI Score5.7

CVSS35.5

EPSS0.001