Lucene search
MitreCVELIST:CVE-2023-32700HistoryMay 20, 2023 - 12:00 a.m.
CVE-2023-32700
2023-05-2000:00:00
mitre
www.cve.org
4
luatex
arbitrary commands
tex live
miktex
security vulnerability
LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.
References
github.com/TeX-Live/texlive-source/releases/tag/build-svn66984
gitlab.lisn.upsaclay.fr/texlive/luatex/-/tags/1.17.0
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RLY43MIRONJSJVNBDFQHQ26MP3JIOB3H/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TF6YXUUFRGBIXIIIEV5SGBJXXT2SMUK5/
tug.org/pipermail/tex-live/2023-May/049188.html
tug.org/~mseven/luatex.html
Related
prion
prion
Design/Logic Flaw
2023-05-20 18:15:00
nessus
nessus
CentOS 8 : texlive (CESA-2023:3661)
2024-02-08 00:00:00
CentOS 9 : texlive-20200406-26.el9
2024-02-29 00:00:00
Oracle Linux 8 / 9 : texlive (ELSA-2023-3661)
2023-06-22 00:00:00
openvas
openvas
Slackware: Security Advisory (SSA:2023-144-01)
2023-05-25 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:2285-1)
2023-05-25 00:00:00
Ubuntu: Security Advisory (USN-6115-1)
2023-05-31 00:00:00
redhatcve
redhatcve
CVE-2023-32700
2023-05-22 07:40:21
veracode
veracode
Arbitrary Code Execution
2023-06-04 23:56:52
debian
debian
[SECURITY] [DLA 3427-1] texlive-bin security update
2023-05-20 16:05:26
[SECURITY] [DSA 5406-1] texlive-bin security update
2023-05-20 08:14:54
[SECURITY] [DLA 3427-2] texlive-bin regression update
2023-05-31 20:20:30
fedora
fedora
[SECURITY] Fedora 38 Update: texlive-base-20220321-72.fc38
2023-05-31 01:35:33
[SECURITY] Fedora 37 Update: texlive-base-20210325-54.fc37
2023-06-04 01:23:54
oraclelinux
oraclelinux
texlive security update
2023-06-21 00:00:00
osv
osv
texlive-bin vulnerability
2023-05-30 09:11:23
texlive-bin - security update
2023-05-20 00:00:00
Important: texlive security update
2023-06-24 18:52:51
rocky
rocky
texlive security update
2023-06-24 18:52:51
mageia
mageia
Updated texlive packages fix security vulnerability
2023-07-19 22:53:31
debiancve
debiancve
CVE-2023-32700
2023-05-20 18:15:09
ubuntucve
ubuntucve
CVE-2023-32700
2023-05-20 00:00:00
ubuntu
ubuntu
TeX Live vulnerability
2023-05-30 00:00:00
cve
cve
CVE-2023-32700
2023-05-20 18:15:09
alpinelinux
alpinelinux
CVE-2023-32700
2023-05-20 18:15:09
almalinux
almalinux
Important: texlive security update
2023-06-19 00:00:00
nvd
nvd
CVE-2023-32700
2023-05-20 18:15:09
slackware
slackware
[slackware-security] texlive
2023-05-25 00:24:57
redhat
redhat
(RHSA-2023:3661) Important: texlive security update
2023-06-19 08:10:56
hp
hp
HP ThinPro 8.0 SP 9 Security Updates
2024-06-17 00:00:00
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00