UBUNTU-CVE-2022-24107

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2022-24107

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24107.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2022-24107

Upstream

CVE-2022-24107

Published

2022-08-30T04:15:00Z

Modified

2026-01-20T17:25:28.318504Z

Severity

7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc.

References

Affected packages

Ubuntu:16.04:LTS

texlive-bin

Package

Name: texlive-bin
Purl: pkg:deb/ubuntu/texlive-bin@2015.20160222.37495-1ubuntu0.1?arch=source&distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2015.*

2015.20150524.37493-5build1

2015.20150524.37493-7

2015.20150524.37493-7build1

2015.20150524.37493-7build4

2015.20160222.37495-1

2015.20160222.37495-1ubuntu0.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libkpathsea-dev",
            "binary_version": "2015.20160222.37495-1ubuntu0.1"
        },
        {
            "binary_name": "libkpathsea6",
            "binary_version": "2015.20160222.37495-1ubuntu0.1"
        },
        {
            "binary_name": "libptexenc-dev",
            "binary_version": "2015.20160222.37495-1ubuntu0.1"
        },
        {
            "binary_name": "libptexenc1",
            "binary_version": "2015.20160222.37495-1ubuntu0.1"
        },
        {
            "binary_name": "libsynctex-dev",
            "binary_version": "2015.20160222.37495-1ubuntu0.1"
        },
        {
            "binary_name": "libsynctex1",
            "binary_version": "2015.20160222.37495-1ubuntu0.1"
        },
        {
            "binary_name": "libtexlua52",
            "binary_version": "2015.20160222.37495-1ubuntu0.1"
        },
        {
            "binary_name": "libtexlua52-dev",
            "binary_version": "2015.20160222.37495-1ubuntu0.1"
        },
        {
            "binary_name": "libtexluajit-dev",
            "binary_version": "2015.20160222.37495-1ubuntu0.1"
        },
        {
            "binary_name": "libtexluajit2",
            "binary_version": "2015.20160222.37495-1ubuntu0.1"
        },
        {
            "binary_name": "texlive-binaries",
            "binary_version": "2015.20160222.37495-1ubuntu0.1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24107.json"

emscripten

Package

Name: emscripten
Purl: pkg:deb/ubuntu/emscripten@1.22.1-1build1?arch=source&distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.22.1-1build1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "emscripten",
            "binary_version": "1.22.1-1build1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24107.json"

ipe

Package

Name: ipe
Purl: pkg:deb/ubuntu/ipe@7.1.10-1.1?arch=source&distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

7.*

7.1.4-2.1

7.1.8-1

7.1.10-1

7.1.10-1.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "ipe",
            "binary_version": "7.1.10-1.1"
        },
        {
            "binary_name": "libipe-dev",
            "binary_version": "7.1.10-1.1"
        },
        {
            "binary_name": "libipe7.1.10",
            "binary_version": "7.1.10-1.1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24107.json"

xpdf

Package

Name: xpdf
Purl: pkg:deb/ubuntu/xpdf@3.04-1ubuntu1.1?arch=source&distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.03-17ubuntu2

3.03-17ubuntu3

3.03-17ubuntu5

3.03-18

3.04-1

3.04-1build1

3.04-1ubuntu1

3.04-1ubuntu1.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "xpdf",
            "binary_version": "3.04-1ubuntu1.1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24107.json"

Ubuntu:18.04:LTS

texlive-bin

Package

Name: texlive-bin
Purl: pkg:deb/ubuntu/texlive-bin@2017.20170613.44572-8ubuntu0.2?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2017.*

2017.20170613.44572-5build1

2017.20170613.44572-5build2

2017.20170613.44572-6

2017.20170613.44572-6build1

2017.20170613.44572-6ubuntu1

2017.20170613.44572-8build1

2017.20170613.44572-8ubuntu0.1

2017.20170613.44572-8ubuntu0.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libkpathsea-dev",
            "binary_version": "2017.20170613.44572-8ubuntu0.2"
        },
        {
            "binary_name": "libkpathsea6",
            "binary_version": "2017.20170613.44572-8ubuntu0.2"
        },
        {
            "binary_name": "libptexenc-dev",
            "binary_version": "2017.20170613.44572-8ubuntu0.2"
        },
        {
            "binary_name": "libptexenc1",
            "binary_version": "2017.20170613.44572-8ubuntu0.2"
        },
        {
            "binary_name": "libsynctex-dev",
            "binary_version": "2017.20170613.44572-8ubuntu0.2"
        },
        {
            "binary_name": "libsynctex1",
            "binary_version": "2017.20170613.44572-8ubuntu0.2"
        },
        {
            "binary_name": "libtexlua52",
            "binary_version": "2017.20170613.44572-8ubuntu0.2"
        },
        {
            "binary_name": "libtexlua52-dev",
            "binary_version": "2017.20170613.44572-8ubuntu0.2"
        },
        {
            "binary_name": "libtexluajit-dev",
            "binary_version": "2017.20170613.44572-8ubuntu0.2"
        },
        {
            "binary_name": "libtexluajit2",
            "binary_version": "2017.20170613.44572-8ubuntu0.2"
        },
        {
            "binary_name": "texlive-binaries",
            "binary_version": "2017.20170613.44572-8ubuntu0.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24107.json"

emscripten

Package

Name: emscripten
Purl: pkg:deb/ubuntu/emscripten@1.22.1-1build1?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.22.1-1build1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "emscripten",
            "binary_version": "1.22.1-1build1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24107.json"

ipe

Package

Name: ipe
Purl: pkg:deb/ubuntu/ipe@7.2.7-3?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

7.*

7.2.7-2

7.2.7-3

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "ipe",
            "binary_version": "7.2.7-3"
        },
        {
            "binary_name": "libipe-dev",
            "binary_version": "7.2.7-3"
        },
        {
            "binary_name": "libipe7.2.7",
            "binary_version": "7.2.7-3"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24107.json"

Ubuntu:20.04:LTS

texlive-bin

Package

Name: texlive-bin
Purl: pkg:deb/ubuntu/texlive-bin@2019.20190605.51237-3ubuntu0.2?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2019.*

2019.20190605.51237-2build1

2019.20190605.51237-3

2019.20190605.51237-3build1

2019.20190605.51237-3build2

2019.20190605.51237-3ubuntu0.1

2019.20190605.51237-3ubuntu0.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libkpathsea-dev",
            "binary_version": "2019.20190605.51237-3ubuntu0.2"
        },
        {
            "binary_name": "libkpathsea6",
            "binary_version": "2019.20190605.51237-3ubuntu0.2"
        },
        {
            "binary_name": "libptexenc-dev",
            "binary_version": "2019.20190605.51237-3ubuntu0.2"
        },
        {
            "binary_name": "libptexenc1",
            "binary_version": "2019.20190605.51237-3ubuntu0.2"
        },
        {
            "binary_name": "libsynctex-dev",
            "binary_version": "2019.20190605.51237-3ubuntu0.2"
        },
        {
            "binary_name": "libsynctex2",
            "binary_version": "2019.20190605.51237-3ubuntu0.2"
        },
        {
            "binary_name": "libtexlua53",
            "binary_version": "2019.20190605.51237-3ubuntu0.2"
        },
        {
            "binary_name": "libtexlua53-dev",
            "binary_version": "2019.20190605.51237-3ubuntu0.2"
        },
        {
            "binary_name": "libtexluajit-dev",
            "binary_version": "2019.20190605.51237-3ubuntu0.2"
        },
        {
            "binary_name": "libtexluajit2",
            "binary_version": "2019.20190605.51237-3ubuntu0.2"
        },
        {
            "binary_name": "texlive-binaries",
            "binary_version": "2019.20190605.51237-3ubuntu0.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24107.json"

ipe

Package

Name: ipe
Purl: pkg:deb/ubuntu/ipe@7.2.13-2build1?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

7.*

7.2.9-1

7.2.13-2

7.2.13-2build1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "ipe",
            "binary_version": "7.2.13-2build1"
        },
        {
            "binary_name": "libipe-dev",
            "binary_version": "7.2.13-2build1"
        },
        {
            "binary_name": "libipe7.2.13",
            "binary_version": "7.2.13-2build1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24107.json"

Ubuntu:22.04:LTS

emscripten

Package

Name: emscripten
Purl: pkg:deb/ubuntu/emscripten@3.1.5~dfsg-3ubuntu1?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.0.13~dfsg-1

3.*

3.1.1~dfsg+~1.39.6-5ubuntu4

3.1.2~dfsg+~1.39.6-6ubuntu1

3.1.3~dfsg-4ubuntu1

3.1.3~dfsg-5ubuntu1

3.1.4~dfsg-7ubuntu1

3.1.5~dfsg-3ubuntu1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "emscripten",
            "binary_version": "3.1.5~dfsg-3ubuntu1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24107.json"

ipe

Package

Name: ipe
Purl: pkg:deb/ubuntu/ipe@7.2.24+dfsg1-1build1?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

7.*

7.2.23+dfsg1-2

7.2.24+dfsg1-1

7.2.24+dfsg1-1build1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "ipe",
            "binary_version": "7.2.24+dfsg1-1build1"
        },
        {
            "binary_name": "libipe-dev",
            "binary_version": "7.2.24+dfsg1-1build1"
        },
        {
            "binary_name": "libipe7.2.24",
            "binary_version": "7.2.24+dfsg1-1build1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24107.json"

texlive-bin

Package

Name: texlive-bin
Purl: pkg:deb/ubuntu/texlive-bin@2021.20210626.59705-1ubuntu0.2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2020.*

2020.20200327.54578-7

2020.20200327.54578-7build1

2021.*

2021.20210626.59705-1

2021.20210626.59705-1build1

2021.20210626.59705-1ubuntu0.1

2021.20210626.59705-1ubuntu0.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libkpathsea-dev",
            "binary_version": "2021.20210626.59705-1ubuntu0.2"
        },
        {
            "binary_name": "libkpathsea6",
            "binary_version": "2021.20210626.59705-1ubuntu0.2"
        },
        {
            "binary_name": "libptexenc-dev",
            "binary_version": "2021.20210626.59705-1ubuntu0.2"
        },
        {
            "binary_name": "libptexenc1",
            "binary_version": "2021.20210626.59705-1ubuntu0.2"
        },
        {
            "binary_name": "libsynctex-dev",
            "binary_version": "2021.20210626.59705-1ubuntu0.2"
        },
        {
            "binary_name": "libsynctex2",
            "binary_version": "2021.20210626.59705-1ubuntu0.2"
        },
        {
            "binary_name": "libtexlua53",
            "binary_version": "2021.20210626.59705-1ubuntu0.2"
        },
        {
            "binary_name": "libtexlua53-dev",
            "binary_version": "2021.20210626.59705-1ubuntu0.2"
        },
        {
            "binary_name": "libtexluajit-dev",
            "binary_version": "2021.20210626.59705-1ubuntu0.2"
        },
        {
            "binary_name": "libtexluajit2",
            "binary_version": "2021.20210626.59705-1ubuntu0.2"
        },
        {
            "binary_name": "texlive-binaries",
            "binary_version": "2021.20210626.59705-1ubuntu0.2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24107.json"

Ubuntu:24.04:LTS

emscripten

Package

Name: emscripten
Purl: pkg:deb/ubuntu/emscripten@3.1.6~dfsg-7?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.1.6~dfsg-5

3.1.6~dfsg-6

3.1.6~dfsg-7

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "emscripten",
            "binary_version": "3.1.6~dfsg-7"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24107.json"

ipe

Package

Name: ipe
Purl: pkg:deb/ubuntu/ipe@7.2.28-2.1build4?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

7.*

7.2.27+dfsg1-2

7.2.28-2

7.2.28-2.1build2

7.2.28-2.1build3

7.2.28-2.1build4

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "ipe",
            "binary_version": "7.2.28-2.1build4"
        },
        {
            "binary_name": "libipe-dev",
            "binary_version": "7.2.28-2.1build4"
        },
        {
            "binary_name": "libipe7.2.28t64",
            "binary_version": "7.2.28-2.1build4"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24107.json"

texlive-bin

Package

Name: texlive-bin
Purl: pkg:deb/ubuntu/texlive-bin@2023.20230311.66589-9build3?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2023.*

2023.20230311.66589-6

2023.20230311.66589-7

2023.20230311.66589-8

2023.20230311.66589-8build1

2023.20230311.66589-9

2023.20230311.66589-9build2

2023.20230311.66589-9build3

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libkpathsea-dev",
            "binary_version": "2023.20230311.66589-9build3"
        },
        {
            "binary_name": "libkpathsea6",
            "binary_version": "2023.20230311.66589-9build3"
        },
        {
            "binary_name": "libptexenc-dev",
            "binary_version": "2023.20230311.66589-9build3"
        },
        {
            "binary_name": "libptexenc1",
            "binary_version": "2023.20230311.66589-9build3"
        },
        {
            "binary_name": "libsynctex-dev",
            "binary_version": "2023.20230311.66589-9build3"
        },
        {
            "binary_name": "libsynctex2",
            "binary_version": "2023.20230311.66589-9build3"
        },
        {
            "binary_name": "libtexlua-dev",
            "binary_version": "2023.20230311.66589-9build3"
        },
        {
            "binary_name": "libtexlua53",
            "binary_version": "2023.20230311.66589-9build3"
        },
        {
            "binary_name": "libtexlua53-5",
            "binary_version": "2023.20230311.66589-9build3"
        },
        {
            "binary_name": "libtexlua53-dev",
            "binary_version": "2023.20230311.66589-9build3"
        },
        {
            "binary_name": "libtexluajit-dev",
            "binary_version": "2023.20230311.66589-9build3"
        },
        {
            "binary_name": "libtexluajit2",
            "binary_version": "2023.20230311.66589-9build3"
        },
        {
            "binary_name": "texlive-binaries",
            "binary_version": "2023.20230311.66589-9build3"
        },
        {
            "binary_name": "texlive-binaries-sse2",
            "binary_version": "2023.20230311.66589-9build3"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24107.json"

Ubuntu:25.10

emscripten

Package

Name: emscripten
Purl: pkg:deb/ubuntu/emscripten@3.1.69+dfsg-3?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.1.69+dfsg-1

3.1.69+dfsg-3

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "emscripten",
            "binary_version": "3.1.69+dfsg-3"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24107.json"

ipe

Package

Name: ipe
Purl: pkg:deb/ubuntu/ipe@7.2.30-1build1?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

7.*

7.2.30-1build1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "ipe",
            "binary_version": "7.2.30-1build1"
        },
        {
            "binary_name": "libipe-dev",
            "binary_version": "7.2.30-1build1"
        },
        {
            "binary_name": "libipe7.2.30",
            "binary_version": "7.2.30-1build1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24107.json"

texlive-bin

Package

Name: texlive-bin
Purl: pkg:deb/ubuntu/texlive-bin@2024.20240313.70630+ds-6ubuntu2?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2024.*

2024.20240313.70630+ds-6

2024.20240313.70630+ds-6ubuntu2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libkpathsea-dev",
            "binary_version": "2024.20240313.70630+ds-6ubuntu2"
        },
        {
            "binary_name": "libkpathsea6",
            "binary_version": "2024.20240313.70630+ds-6ubuntu2"
        },
        {
            "binary_name": "libptexenc-dev",
            "binary_version": "2024.20240313.70630+ds-6ubuntu2"
        },
        {
            "binary_name": "libptexenc1",
            "binary_version": "2024.20240313.70630+ds-6ubuntu2"
        },
        {
            "binary_name": "libsynctex-dev",
            "binary_version": "2024.20240313.70630+ds-6ubuntu2"
        },
        {
            "binary_name": "libsynctex2",
            "binary_version": "2024.20240313.70630+ds-6ubuntu2"
        },
        {
            "binary_name": "libtexlua-dev",
            "binary_version": "2024.20240313.70630+ds-6ubuntu2"
        },
        {
            "binary_name": "libtexlua53",
            "binary_version": "2024.20240313.70630+ds-6ubuntu2"
        },
        {
            "binary_name": "libtexlua53-5",
            "binary_version": "2024.20240313.70630+ds-6ubuntu2"
        },
        {
            "binary_name": "libtexlua53-dev",
            "binary_version": "2024.20240313.70630+ds-6ubuntu2"
        },
        {
            "binary_name": "libtexluajit-dev",
            "binary_version": "2024.20240313.70630+ds-6ubuntu2"
        },
        {
            "binary_name": "libtexluajit2",
            "binary_version": "2024.20240313.70630+ds-6ubuntu2"
        },
        {
            "binary_name": "texlive-binaries",
            "binary_version": "2024.20240313.70630+ds-6ubuntu2"
        },
        {
            "binary_name": "texlive-binaries-sse2",
            "binary_version": "2024.20240313.70630+ds-6ubuntu2"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-24107.json"