CVE-2021-3508: Medium severity Pdfresurrect Project Pdfresurrect vulnerability
A flaw was found in PDFResurrect in version 0.22b. There is a infinite loop in getxreflinearskipped() in pdf.c via a crafted PDF file.
Reference: https://github.com/enferex/pdfresurrect/issues/17
Upstream patch: https://github.com/enferex/pdfresurrect/commit/7e35d1806e111fd28610ccc86bb33f54792ac370
Other sources
A flaw was found in PDFResurrect in version 0.22b. There is an infinite loop in getxreflinearskipped() in pdf.c via a crafted PDF file.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/PDFResurrectto a version that resolves this vulnerability.Fixed in 0.23 - Upgrade
Upgrade
PDFResurrectto a version that resolves this vulnerability.Fixed in 0.22bPatch 7e35d1806e111fd28610ccc86bb33f54792ac370
Event History
Frequently Asked Questions
What is the severity of CVE-2021-3508?
CVE-2021-3508 is classified with a moderate severity due to the potential for an infinite loop condition in PDFResurrect.
How do I fix CVE-2021-3508?
To fix CVE-2021-3508, upgrade PDFResurrect to version 0.23 or later.
What is the affected version of PDFResurrect for CVE-2021-3508?
CVE-2021-3508 affects version 0.22b of PDFResurrect.
What type of flaw is identified in CVE-2021-3508?
CVE-2021-3508 identifies an infinite loop flaw in the get_xref_linear_skipped() function.
How is CVE-2021-3508 triggered?
CVE-2021-3508 can be triggered by processing a specially crafted PDF file.