Vulnerability CVE-2022-27135: Information
Description
xpdf 4.03 has heap buffer overflow in the function readXRefTable located in XRef.cc. An attacker can exploit this bug to cause a Denial of Service (Segmentation fault) or other unspecified effects by sending a crafted PDF file to the pdftoppm binary.
Severity: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Fixed packages
Package name | Branch | Fixed in version | Version from repository | Errata ID | Task # | State |
|---|---|---|---|---|---|---|
| xpdf | sisyphus | 4.04-alt1 | 4.05-alt1 | ALT-PU-2022-1867-1 | 300016 | Fixed |
| xpdf | sisyphus_e2k | 4.04-alt1 | 4.05-alt1 | ALT-PU-2022-4977-1 | - | Fixed |
| xpdf | sisyphus_riscv64 | 4.04-alt1 | 4.05-alt1 | ALT-PU-2022-4967-1 | - | Fixed |
| xpdf | p10 | 4.04-alt1 | 4.04-alt1 | ALT-PU-2022-2449-1 | 305300 | Fixed |
| xpdf | p10_e2k | 4.04-alt1 | 4.04-alt1 | ALT-PU-2022-5901-1 | - | Fixed |
| xpdf | c10f1 | 4.04-alt1 | 4.04-alt1 | ALT-PU-2022-2449-1 | 305300 | Fixed |
| xpdf | p11 | 4.04-alt1 | 4.05-alt1 | ALT-PU-2022-1867-1 | 300016 | Fixed |
References to Advisories, Solutions, and Tools
Hyperlink | Resource |
|---|---|
| https://github.com/verf1sh/Poc/blob/master/poc_ppm |
|
| https://forum.xpdfreader.com/viewtopic.php?f=3&t=42232 |
|
| https://github.com/verf1sh/Poc/blob/master/pic_ppm.png |
|