Lucene search
HistorySep 15, 2022 - 9:15 p.m.
CVE-2022-38334
xpdf catalog stack overflow
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
23.8%
XPDF v4.04 and earlier was discovered to contain a stack overflow via the function Catalog::countPageTree() at Catalog.cc.
Affected configurations
Node
xpdfreaderxpdfRange≤4.04
| Vendor | Product | Version | CPE |
|---|---|---|---|
| xpdfreader | xpdf | * | cpe:2.3:a:xpdfreader:xpdf:*:*:*:*:*:*:*:* |
Related
ubuntucve
ubuntucve
CVE-2022-38334
2022-09-15 00:00:00
cve
cve
CVE-2022-38334
2022-09-15 21:15:09
veracode
veracode
Stack Overflow
2024-04-10 17:08:20
alpinelinux
alpinelinux
CVE-2022-38334
2022-09-15 21:15:09
prion
prion
Stack overflow
2022-09-15 21:15:00
cvelist
cvelist
CVE-2022-38334
2022-09-15 00:00:00
debiancve
debiancve
CVE-2022-38334
2022-09-15 21:15:09
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0035)
2024-02-12 00:00:00
mageia
mageia
Updated xpdf packages fix security vulnerabilities
2024-02-10 22:02:27
nessus
nessus
GLSA-202409-25 : Xpdf: Multiple Vulnerabilities
2024-09-25 00:00:00
gentoo
gentoo
Xpdf: Multiple Vulnerabilities
2024-09-25 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
23.8%
Related for NVD:CVE-2022-38334