Lucene search
Ubuntu.comUB:CVE-2022-43071HistoryNov 15, 2022 - 12:00 a.m.
CVE-2022-43071
2022-11-1500:00:00
ubuntu.com
ubuntu.com
18
stack overflow
xpdf v4.04
catalog::readpagelabeltree2
dos
crafted pdf file
denial of service
poppler
debian
unix
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
30.1%
A stack overflow in the Catalog::readPageLabelTree2(Object*) function of
XPDF v4.04 allows attackers to cause a Denial of Service (DoS) via a
crafted PDF file.
Notes
| Author | Note |
|---|---|
| ebarretto | xpdf in Debian uses poppler, which is not affected or fixed |
Related
cve
cve
CVE-2022-43071
2022-11-15 17:15:11
cvelist
cvelist
CVE-2022-43071
2022-11-15 00:00:00
veracode
veracode
Stack Overflow
2024-04-10 21:15:22
alpinelinux
alpinelinux
CVE-2022-43071
2022-11-15 17:15:11
prion
prion
Stack overflow
2022-11-15 17:15:00
debiancve
debiancve
CVE-2022-43071
2022-11-15 17:15:11
nvd
nvd
CVE-2022-43071
2022-11-15 17:15:11
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0035)
2024-02-12 00:00:00
mageia
mageia
Updated xpdf packages fix security vulnerabilities
2024-02-10 22:02:27
nessus
nessus
GLSA-202409-25 : Xpdf: Multiple Vulnerabilities
2024-09-25 00:00:00
gentoo
gentoo
Xpdf: Multiple Vulnerabilities
2024-09-25 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
30.1%
Related for UB:CVE-2022-43071