Lucene search
Ubuntu.comUB:CVE-2022-38334HistorySep 15, 2022 - 12:00 a.m.
CVE-2022-38334
2022-09-1500:00:00
ubuntu.com
ubuntu.com
22
xpdf
stack overflow
catalog.cc
poppler
debian
unix
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
23.8%
XPDF v4.04 and earlier was discovered to contain a stack overflow via the
function Catalog::countPageTree() at Catalog.cc.
Notes
| Author | Note |
|---|---|
| ebarretto | xpdf in Debian uses poppler, which is not affected or fixed |
Related
nvd
nvd
CVE-2022-38334
2022-09-15 21:15:09
cve
cve
CVE-2022-38334
2022-09-15 21:15:09
veracode
veracode
Stack Overflow
2024-04-10 17:08:20
alpinelinux
alpinelinux
CVE-2022-38334
2022-09-15 21:15:09
prion
prion
Stack overflow
2022-09-15 21:15:00
cvelist
cvelist
CVE-2022-38334
2022-09-15 00:00:00
debiancve
debiancve
CVE-2022-38334
2022-09-15 21:15:09
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0035)
2024-02-12 00:00:00
mageia
mageia
Updated xpdf packages fix security vulnerabilities
2024-02-10 22:02:27
nessus
nessus
GLSA-202409-25 : Xpdf: Multiple Vulnerabilities
2024-09-25 00:00:00
gentoo
gentoo
Xpdf: Multiple Vulnerabilities
2024-09-25 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
23.8%
Related for UB:CVE-2022-38334