Heap-based buffer overflow in QPDF - CVE-2022-34503

Vulnerability identifier: #VU66596

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-34503

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the QPDF::processXRefStream() function. A remote attacker can pass specially crafted data to the application, trigger a heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

QPDF
SUSE CaaS Platform
SUSE Enterprise Storage
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Performance Computing
openSUSE Leap
openEuler
libqpdf18-debuginfo
qpdf
qpdf-debuginfo
qpdf-debugsource
qpdf-devel
libqpdf18
libqpdf21-debuginfo
libqpdf21
qpdf-help

Install updates from vendor's website.

QPDF - update to 9.0.0
libqpdf18-debuginfo - update to 7.1.1-3.8.1
qpdf - addressed in versions 7.1.1-3.8.1, 8.0.2-150000.3.5.1
qpdf-debuginfo - addressed in versions 7.1.1-3.8.1, 8.0.2-150000.3.5.1
qpdf-debugsource - addressed in versions 7.1.1-3.8.1, 8.0.2-150000.3.5.1
qpdf-devel - addressed in versions 7.1.1-3.8.1, 8.0.2-150000.3.5.1
libqpdf18 - update to 7.1.1-3.8.1
libqpdf21-debuginfo - update to 8.0.2-150000.3.5.1
libqpdf21 - update to 8.0.2-150000.3.5.1
qpdf-help - update to 8.4.2-5
qpdf-devel - update to 8.4.2-5
qpdf-debugsource - update to 8.4.2-5
qpdf-debuginfo - update to 8.4.2-5
qpdf - update to 8.4.2-5

• https://github.com/qpdf/qpdf/issues/701

• Heap-based buffer overflow in QPDF
• SUSE update for qpdf
• SUSE update for qpdf
• openEuler 20.03 LTS SP4 update for qpdf
• openEuler 22.03 LTS SP1 update for qpdf
• openEuler 22.03 LTS SP4 update for qpdf
• openEuler 22.03 LTS SP3 update for qpdf