Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2022-48545
HistoryAug 22, 2023 - 7:16 p.m.

CVE-2022-48545

2023-08-2219:16:31
Debian Security Bug Tracker
security-tracker.debian.org
12
cve-2022-48545
catalog::finddestintree
infinite recursion
denial of service
xpdf 4.02
unix

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0

Percentile

12.7%

An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02.

OSVersionArchitecturePackageVersionFilename
Debian12allxpdf< 3.04+git20220601-1xpdf_3.04+git20220601-1_all.deb
Debian11allxpdf< 3.04+git20210103-3xpdf_3.04+git20210103-3_all.deb
Debian999allxpdf< 3.04+git20240613-1xpdf_3.04+git20240613-1_all.deb
Debian13allxpdf< 3.04+git20240613-1xpdf_3.04+git20240613-1_all.deb

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0

Percentile

12.7%