Vulnerability CVE-2019-9588: Information
Description
There is an Invalid memory access in gAtomicIncrement() located at GMutex.h in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) the pdftops binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.
Severity: HIGH (7.8) Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Fixed packages
Package name | Branch | Fixed in version | Version from repository | Errata ID | Task # | State |
|---|---|---|---|---|---|---|
| xpdf | sisyphus | 4.05-alt1 | 4.05-alt1 | ALT-PU-2024-7465-3 | 347491 | Fixed |
| xpdf | sisyphus_e2k | 4.05-alt1 | 4.05-alt1 | ALT-PU-2024-7502-1 | - | Fixed |
| xpdf | sisyphus_riscv64 | 4.05-alt1 | 4.05-alt1 | ALT-PU-2024-7493-1 | - | Fixed |
| xpdf | sisyphus_loongarch64 | 4.05-alt1 | 4.05-alt1 | ALT-PU-2024-7487-1 | - | Fixed |
| xpdf | p10 | 4.05-alt1 | 4.04-alt1 | ALT-PU-2024-7467-2 | 347494 | Testing |
References to Advisories, Solutions, and Tools
Hyperlink | Resource |
|---|---|
| https://research.loginsoft.com/bugs/invalid-memory-access-in-gatomiccounter-gatomicincrement-xpdf-4-01/ |
|
| https://forum.xpdfreader.com/viewtopic.php?f=3&t=41261 |
|