Integer overflow in xpdf - CVE-2022-38171

Vulnerability identifier: #VU73888

CSH Severity: High

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-38171

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow within the JBIG2 decoder in the JBIG2Stream::readTextRegionSeg() function in JBIG2Stream.cc. A remote attacker can pass a specially crafted PDF file or JBIG2 image to the application, trigger an integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Note, the vulnerability is related to #VU56067 (CVE-2021-30860).

xpdf
Amazon Linux AMI
Anolis OS
Oracle Solaris
openEuler
poppler-cpp-devel
poppler-help
poppler-glib-doc
poppler-cpp
poppler-devel
poppler-qt5
poppler-glib-devel
poppler-glib
poppler-debugsource
poppler-qt5-devel
poppler-qt-devel
poppler-debuginfo
poppler
poppler-qt
poppler-doc
poppler-utils

Install updates from vendor's website.

xpdf - update to 4.04
poppler-cpp-devel - update to 0.67.0-8
poppler-help - update to 0.67.0-8
poppler-glib-doc - update to 0.67.0-8
poppler-cpp - update to 0.67.0-8
poppler-devel - update to 0.67.0-8
poppler-qt5 - update to 0.67.0-8
poppler-glib-devel - update to 0.67.0-8
poppler-glib - update to 0.67.0-8
poppler-debugsource - update to 0.67.0-8
poppler-qt5-devel - update to 0.67.0-8
poppler-qt-devel - update to 0.67.0-8
poppler-debuginfo - update to 0.67.0-8
poppler - update to 0.67.0-8
poppler-qt - update to 0.67.0-8
poppler-glib-doc - update to 20.11.0-6.0.1
poppler-doc - update to 20.11.0-6.0.1
poppler-utils - update to 20.11.0-6.0.1
poppler-qt5-devel - update to 20.11.0-6.0.1
poppler-qt5 - update to 20.11.0-6.0.1
poppler-glib-devel - update to 20.11.0-6.0.1
poppler-glib - update to 20.11.0-6.0.1
poppler-devel - update to 20.11.0-6.0.1
poppler-cpp-devel - update to 20.11.0-6.0.1
poppler-cpp - update to 20.11.0-6.0.1
poppler - update to 20.11.0-6.0.1
poppler - update to 22.08.0-3

• https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html
• http://www.xpdfreader.com/security-fixes.html
• http://www.openwall.com/lists/oss-security/2022/09/02/11
• https://github.com/zmanion/Vulnerabilities/blob/main/CVE-2022-38171.md

• Multiple vulnerabilities in xpdf
• Multiple vulnerabilities in Oracle Solaris
• openEuler update for poppler
• Amazon Linux AMI update for poppler
• Anolis OS update for poppler