Important: kernel

Issue Overview: A flaw was found in the Linux kernel Traffic Control TC subsystem. Using a specific networking configuration redirecting egress packets to ingress using TC action "mirred" a local unprivileged user could trigger a CPU soft lockup ABBA deadlock when the transport protocol in use TC...

CVE-2023-3436

Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream...

CVE-2023-3436

Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream...

CVE-2023-3436

Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream...

UBUNTU-CVE-2023-3436

Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream...

Design/Logic Flaw

Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream...

CVE-2023-3436 Deadlock in Xpdf 4.04 due to PDF object stream references

Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream...

CVE-2023-3436 Deadlock in Xpdf 4.04 due to PDF object stream references

Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream...

CVE-2023-3436

CVE-2023-3436 affects Xpdf 4.04 where a PDF object stream’s Length field, if placed in another object stream, can cause a deadlock. Public sources (Slackware/Mageia advisories) recommend upgrading to Xpdf 4.05 or newer to fix the issue, with related entries noting other CVEs in the same release. ...

CVE-2023-3436

Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream...

CVE-2023-3436

Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream...

CVE-2023-3436

Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream...

Moderate: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Xpdf 安全漏洞

Xpdf is a free PDF viewer and toolkit from Xpdf, including a text extractor, image converter, HTML converter and more. A security vulnerability exists in Xpdf version 4.04, which stems from the presence of a runtime deadlock problem...

PT-2023-24838 · Xpdf +1 · Xpdf +1

Name of the Vulnerable Software and Affected Versions: Xpdf version 4.04 Description: The issue occurs when Xpdf 4.04 encounters a PDF object stream whose Length field is itself in another object stream, causing a deadlock. Recommendations: For Xpdf version 4.04, consider updating to a newer...

CVE-2023-3436: Deadlock

Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream...

USN-6187-1: Linux kernel (IBM) vulnerabilities

William Zhao discovered that the Traffic Control TC subsystem in the Linux kernel did not properly handle network packet retransmission in certain situations. A local attacker could use this to cause a denial of service kernel deadlock. CVE-2022-4269 It was discovered that the TUN/TAP driver in t...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.117 and fixes atleast the following security issues: In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs CVE-2022-48425. An out-of-bounds memory access flaw was found in...

USN-6162-1 linux-intel-iotg-5.15 vulnerabilities

Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in the netfilter subsystem of the Linux kernel when processing batch requests, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrar...

USN-6162-1: Linux kernel (Intel IoTG) vulnerabilities

Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in the netfilter subsystem of the Linux kernel when processing batch requests, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrar...