CVE-2023-26930: Buffer Overflow
DISPUTED Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. NOTE: Vendor states “it's an expected abort on out-of-memory error.”
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/xpdfto a version that resolves this vulnerability.Fixed in 4.05-r0
Event History
Frequently Asked Questions
What is the vulnerability ID for this XPDF vulnerability?
The vulnerability ID is CVE-2023-26930.
What is the severity of CVE-2023-26930?
The severity of CVE-2023-26930 is medium with a CVSS score of 5.5.
What is the affected software for CVE-2023-26930?
The affected software is XPDF v.4.04 by Xpdfreader.
How does CVE-2023-26930 work?
CVE-2023-26930 is a buffer overflow vulnerability that allows an attacker to cause a Denial of Service by exploiting the PDFDoc malloc in the pdftotext.cc function.
Is there a fix available for CVE-2023-26930?
At the moment, there is no official fix available for CVE-2023-26930. However, the vendor states that the issue is an expected abort on out-of-memory error.