Lucene search

K
mageiaGentoo FoundationMGASA-2024-0169
HistoryMay 09, 2024 - 5:40 a.m.

Updated php-tcpdf packages fix security vulnerability

2024-05-0905:40:29
Gentoo Foundation
advisories.mageia.org
15
tcpdf
php
security vulnerability
redos
regular expression denial of service
cve-2024-22640
unix

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

TCPDF version <=6.6.5 is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted HTML page with a crafted color. (CVE-2024-22640)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchphp-tcpdf< 6.5.0-1.1php-tcpdf-6.5.0-1.1.mga9

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%