Lucene search
Ubuntu.comUB:CVE-2023-46361HistoryOct 31, 2023 - 12:00 a.m.
CVE-2023-46361
2023-10-3100:00:00
ubuntu.com
ubuntu.com
18
artifex software jbig2dec v0.20
segv vulnerability
jbig2_error
denial of service
command line tool
null pointer dereference
uninitialized variable
out-of-bounds read
fix released
unix
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
17.0%
Artifex Software jbig2dec v0.20 was discovered to contain a SEGV
vulnerability via jbig2_error at /jbig2dec/jbig2.c.
Bugs
- <https://bugs.ghostscript.com/show_bug.cgi?id=707308 (dupe)>
- <https://bugs.ghostscript.com/show_bug.cgi?id=705041 (similar issue)>
Notes
| Author | Note |
|---|---|
| Priority reason: Just a denial of service in a command line tool | |
| mdeslaur | null pointer dereference bug listed below contains similar issue as of 2023-11-01, there is no fix available from the jbig2dec developers |
| ccdm94 | fix released on 2023-11-05. focal and earlier are not affected by this issue, as they do not include the changes from commit f9d37c7c, meaning, the uninitialized variable that causes the issue is not present in the code. |
| mdeslaur | This is just an out-of-bounds read in a command-line tool resulting in a denial of service. |
Related
prion
prion
Design/Logic Flaw
2023-10-31 06:15:00
alpinelinux
alpinelinux
CVE-2023-46361
2023-10-31 06:15:08
cvelist
cvelist
CVE-2023-46361
2023-10-31 00:00:00
redos
redos
ROS-20240415-01
2024-04-15 00:00:00
vulnrichment
vulnrichment
CVE-2023-46361
2023-10-31 00:00:00
nessus
nessus
osv
osv
CVE-2023-46361
2023-10-31 06:15:08
cve
cve
CVE-2023-46361
2023-10-31 06:15:08
debiancve
debiancve
CVE-2023-46361
2023-10-31 06:15:08
nvd
nvd
CVE-2023-46361
2023-10-31 06:15:08
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
17.0%
Related for UB:CVE-2023-46361