Denial of service in Dompdf

1) Uncontrolled Recursion

EUVDB-ID: #VU85894

Risk: Medium

CVSSv3.1: 4.6 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-50262

CWE-ID: CWE-674 - Uncontrolled Recursion

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite recursion when validating SVG images. A remote attacker can pass specially crafted input to the application and cause a denial of service condition on the target system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Dompdf: 0.5.2 - 2.0.3

External links

http://github.com/dompdf/dompdf/security/advisories/GHSA-3qx2-6f78-w2j2
http://github.com/dompdf/dompdf/commit/41cbac16f3cf56affa49f06e8dae66d0eac2b593
http://github.com/dompdf/dompdf/blob/v2.0.3/src/Image/Cache.php#L136-L153

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.