Lucene search
HistoryJul 22, 2022 - 3:15 p.m.
CVE-2022-34503
qpdf
v8.4.2
heap buffer overflow
vulnerability
denial of service
pdf file
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
31.4%
QPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF::processXRefStream. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.
Affected configurations
Node
qpdf_projectqpdfMatch8.4.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| qpdf_project | qpdf | 8.4.2 | cpe:2.3:a:qpdf_project:qpdf:8.4.2:*:*:*:*:*:*:* |
References
Related
osv
osv
CVE-2022-34503
2022-07-22 15:15:08
redhatcve
redhatcve
CVE-2022-34503
2022-07-27 04:55:00
nessus
nessus
Amazon Linux 2 : qpdf (ALAS-2023-2099)
2023-07-01 00:00:00
SUSE SLES12 Security Update : qpdf (SUSE-SU-2022:2669-1)
2022-08-05 00:00:00
SUSE SLES15 Security Update : qpdf (SUSE-SU-2022:2670-1)
2022-08-05 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-07-25 10:24:10
cvelist
cvelist
CVE-2022-34503
2022-07-22 14:17:21
prion
prion
Heap overflow
2022-07-22 15:15:00
debiancve
debiancve
CVE-2022-34503
2022-07-22 15:15:08
cve
cve
CVE-2022-34503
2022-07-22 15:15:08
ubuntucve
ubuntucve
CVE-2022-34503
2022-07-22 00:00:00
amazon
amazon
Medium: qpdf
2023-06-21 19:11:00
suse
suse
Security update for qpdf (important)
2022-08-04 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:2670-1)
2022-08-05 00:00:00
openSUSE: Security Advisory for qpdf (SUSE-SU-2022:2670-1)
2022-08-05 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:2669-1)
2022-08-05 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
31.4%
Related for NVD:CVE-2022-34503