Medium: qpdf

Issue Overview: QPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF::processXRefStream. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PDF file. CVE-2022-34503 Affected Packages: qpdf Note: This advisory is applicable to Amazon...

SUSE: Security Advisory (SUSE-SU-2022:2670-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 / openSUSE 15 Security Update : qpdf (SUSE-SU-2022:2670-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2670-1 advisory. - CVE-2022-34503: Fixed a heap buffer overflow via the function QPDF:processXRefStream bsc1201830. - CVE-2021-36978:...

CVE-2022-34503

A heap buffer overflow vulnerability was discovered in qpdf via the QPDF::processXRefStream function. This flaw allows an attacker to cause a denial of service DoS via a crafted PDF file...

CVE-2022-34503

creationtimestamp| type| source ---|---|--- 2022-07-22 18:19:44+00:00| seen| https://t.me/cibsecurity/46814...

CVE-2022-34503

QPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF::processXRefStream. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PDF file...

CVE-2022-34503

CVE-2022-34503 affects QPDF v8.4.2, where a heap buffer overflow in QPDF::processXRefStream enables DoS via crafted PDFs. Connected docs confirm the vulnerability and associated advisories (including Astra Linux, EUVD, OSV entries) but do not provide an explicit patched version in the supplied ma...