Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2024.0035
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2024-0035)
Zusammenfassung:	The remote host is missing an update for the 'xpdf' package(s) announced via the MGASA-2024-0035 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'xpdf' package(s) announced via the MGASA-2024-0035 advisory. Vulnerability Insight: The updated packages fix security vulnerabilities: Logic bug in text extractor led to invalid memory access. (CVE-2022-30524) Integer overflow in rasterizer. (CVE-2022-30775) PDF object loop in Catalog::countPageTree. (CVE-2022-33108) PDF object loop in AcroForm::scanField. (CVE-2022-36561) Logic bug in JBIG2 decoder. (CVE-2022-38222) PDF object loop in Catalog::countPageTree. (CVE-2022-38334) Missing bounds check in CFF font converter caused null pointer dereference. (CVE-2022-38928) PDF object loop in Catalog::countPageTree. (CVE-2022-41842) Missing bounds check in CFF font parser caused invalid memory access. (CVE-2022-41843) PDF object loop in AcroForm::scanField. (CVE-2022-41844) PDF object loop in Catalog::readPageLabelTree2. (CVE-2022-43071) PDF object loop in Catalog::countPageTree. (CVE-2022-43295) PDF object loop in Catalog::countPageTree. (CVE-2022-45586) PDF object loop in Catalog::countPageTree. (CVE-2022-45587) Divide-by-zero in Xpdf 4.04 due to bad color space object. (CVE-2023-2662) PDF object loop in Catalog::readPageLabelTree2. (CVE-2023-2663) PDF object loop in Catalog::readEmbeddedFileTree. (CVE-2023-2664) Divide-by-zero in Xpdf 4.04 due to very large page size. (CVE-2023-3044) Deadlock in Xpdf 4.04 due to PDF object stream references. (CVE-203-3436) Affected Software/OS: 'xpdf' package(s) on Mageia 9. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2022-30524 https://forum.xpdfreader.com/viewtopic.php?f=3&t=42261 Common Vulnerability Exposure (CVE) ID: CVE-2022-30775 https://forum.xpdfreader.com/viewtopic.php?f=3&t=42264 Common Vulnerability Exposure (CVE) ID: CVE-2022-33108 https://forum.xpdfreader.com/viewtopic.php?f=3&t=42284 https://forum.xpdfreader.com/viewtopic.php?f=3&t=42286 https://forum.xpdfreader.com/viewtopic.php?f=3&t=42287 Common Vulnerability Exposure (CVE) ID: CVE-2022-36561 https://forum.xpdfreader.com/viewtopic.php?f=3&t=42308 Common Vulnerability Exposure (CVE) ID: CVE-2022-38222 https://forum.xpdfreader.com/viewtopic.php?f=3&t=42320 Common Vulnerability Exposure (CVE) ID: CVE-2022-38334 https://forum.xpdfreader.com/viewtopic.php?f=3&t=42122 https://forum.xpdfreader.com/viewtopic.php?f=3&t=42314&p=43872 Common Vulnerability Exposure (CVE) ID: CVE-2022-38928 https://forum.xpdfreader.com/viewtopic.php?f=3&t=42325&sid=7b08ba9a518a99ce3c5ff40e53fc6421 Common Vulnerability Exposure (CVE) ID: CVE-2022-41842 http://www.xpdfreader.com/download.html https://forum.xpdfreader.com/viewtopic.php?f=1&t=42340&p=43928&hilit=gfseek#p43928 Common Vulnerability Exposure (CVE) ID: CVE-2022-41843 https://forum.xpdfreader.com/viewtopic.php?f=1&t=42344 Common Vulnerability Exposure (CVE) ID: CVE-2022-41844 https://forum.xpdfreader.com/viewtopic.php?f=3&t=42308&p=43844&hilit=XRef%3A%3Afetch#p43844 Common Vulnerability Exposure (CVE) ID: CVE-2022-43071 https://forum.xpdfreader.com/viewtopic.php?f=3&t=42349&p=43959#p43959 Common Vulnerability Exposure (CVE) ID: CVE-2022-43295 https://forum.xpdfreader.com/viewtopic.php?t=42360 Common Vulnerability Exposure (CVE) ID: CVE-2022-45586 https://forum.xpdfreader.com/viewtopic.php?t=42361 Common Vulnerability Exposure (CVE) ID: CVE-2022-45587 Common Vulnerability Exposure (CVE) ID: CVE-2023-2662 https://forum.xpdfreader.com/viewtopic.php?t=42505 Common Vulnerability Exposure (CVE) ID: CVE-2023-2663 https://forum.xpdfreader.com/viewtopic.php?t=42421 Common Vulnerability Exposure (CVE) ID: CVE-2023-2664 https://forum.xpdfreader.com/viewtopic.php?t=42422 Common Vulnerability Exposure (CVE) ID: CVE-2023-3044 https://github.com/baker221/poc-xpdf https://www.xpdfreader.com/security-bug/CVE-2023-3044.html Common Vulnerability Exposure (CVE) ID: CVE-2023-3436 https://forum.xpdfreader.com/viewtopic.php?t=42618
Copyright	Copyright (C) 2024 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.