CVE-2023-46051

CVE-2023-46051 affects TeX Live 944e257, with a vulnerability in texk/web2c/pdftexdir/tounicode.c that may cause a NULL pointer dereference. The issue is documented as a potential crash (local impact) with no confidentiality or integrity loss, and a low overall base score (AV:L/AC:L/PR:N/UI:R/S:U...

CVE-2023-46048

CVE-2023-46048 affects Tex Live 944e257, with a NULL pointer dereference in texk/web2c/pdftexdir/writet1.c. The CVSSv3.1 base score is 6.2 (Local, No privileges required, No user interaction, Availability impact High). Some sources note the issue is disputed and should be categorized as a usabili...

CVE-2023-46048

Tex Live 944e257 has a NULL pointer dereference in texk/web2c/pdftexdir/writet1.c. NOTE: this is disputed because it should be categorized as a usability problem...

Tex Live 安全漏洞

TeX Live is a free and open source TeX distribution for typesetting documents. A security vulnerability exists in Tex Live that stems from a discovery in texk/web2c/pdftexdir/writet1.c that contains a null pointer dereference vulnerability...

CVE-2023-46051

TeX Live 944e257 allows a NULL pointer dereference in texk/web2c/pdftexdir/tounicode.c. NOTE: this is disputed because it should be categorized as a usability problem...

CVE-2023-46048

Tex Live 944e257 has a NULL pointer dereference in texk/web2c/pdftexdir/writet1.c. NOTE: this is disputed because it should be categorized as a usability problem...

CVE-2023-46048

Tex Live 944e257 has a NULL pointer dereference in texk/web2c/pdftexdir/writet1.c. NOTE: this is disputed because it should be categorized as a usability problem...

CVE-2023-46051

TeX Live 944e257 allows a NULL pointer dereference in texk/web2c/pdftexdir/tounicode.c. NOTE: this is disputed because it should be categorized as a usability problem...

Ubuntu: Security Advisory (USN-6695-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6695-1: TeX Live vulnerabilities

It was discovered that TeX Live incorrectly handled certain memory operations in the embedded axodraw2 tool. An attacker could possibly use this issue to cause TeX Live to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS. CVE-2019-18604 It was discovered that TeX...

USN-6695-1 texlive-bin vulnerabilities

It was discovered that TeX Live incorrectly handled certain memory operations in the embedded axodraw2 tool. An attacker could possibly use this issue to cause TeX Live to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS. CVE-2019-18604 It was discovered that TeX...

Ubuntu 20.04 LTS / 22.04 LTS / 23.10 : TeX Live vulnerabilities (USN-6695-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6695-1 advisory. It was discovered that TeX Live incorrectly handled certain memory operations in the embedded axodraw2 tool. An attacker could possib...

CentOS 9 : texlive-20200406-26.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the texlive-20200406-26.el9 build changelog. - LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs...

TeX Live Security Breach

TeX Live is a free and open source TeX distribution for typesetting documents. A security vulnerability exists in TeX Live version c515e, which stems from a buffer overflow vulnerability in the function ttfLoadHDMX:ttfdump...

CentOS 8 : texlive (CESA-2023:3661)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:3661 advisory. - LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because...

TeX Live Security Breach

TeX Live is a free, open source TeX distribution for typesetting documents. A security vulnerability exists in TeX Live version v.944e257 that stems from the presence of a Null pointer reference issue...

PT-2024-13324 · Tex Live +2 · Tex Live +2

Name of the Vulnerable Software and Affected Versions: TeX Live version 944e257 Description: The issue in TeX Live allows a NULL pointer dereference in the tounicode.c file, located in texk/web2c/pdftexdir. However, it is noted that this issue is disputed and might be categorized as a usability...

PT-2024-13321 · Tex Live +2 · Tex Live +2

Name of the Vulnerable Software and Affected Versions: Tex Live version 944e257 Description: The issue is related to a NULL pointer dereference in the writet1.c file located in texk/web2c/pdftexdir. This occurs when handling a crafted cmr10.pfb file. It is noted that the categorization of this...

Oracle Linux 7 : texlive (ELSA-2020-1036)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1036 advisory. 2:2012-45.20130427r30134 - Related: 1650521, buffer overflow in t1checkunusualcharstring function 2:2012-44.20130427r30134 - Resolves: 1650521, buffer overflow ...

openSUSE 15: libkpathsea6 / libptexenc1 / libsynctex2 / libtexlua53-5 / etc (SUSE-SU-2023:2284-2)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:2284-2 advisory. - CVE-2023-32700: Fixed arbitrary code execution in LuaTeX bsc1211389. Tenable has extracted the preceding description block directly from the SUSE security...