UBUNTU-CVE-2023-24808

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2023-24808
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-24808.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2023-24808
Related
Published
2023-02-07T01:15:00Z
Modified
2025-06-03T17:46:24Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

PDFio is a C library for reading and writing PDF files. In versions prior to 1.1.0 a denial of service (DOS) vulnerability exists in the pdfio parser. Crafted pdf files can cause the program to run at 100% utilization and never terminate. The pdf which causes this crash found in testing is about 28kb in size and was discovered via fuzzing. Anyone who uses this library either as a standalone binary or as a library can be DOSed when attempting to parse this type of file. Web servers or other automated processes which rely on this code to turn pdf submissions into plaintext can be DOSed when an attacker uploads the pdf. Please see the linked GHSA for an example pdf. Users are advised to upgrade. There are no known workarounds for this vulnerability.

References

Affected packages

Ubuntu:Pro:18.04:LTS / ippsample

Package

Name
ippsample
Purl
pkg:deb/ubuntu/ippsample@0.0+20180213-0ubuntu1?arch=source&distro=esm-apps/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.0+20180213-0ubuntu1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:20.04:LTS / ippsample

Package

Name
ippsample
Purl
pkg:deb/ubuntu/ippsample@0.0+20180213-0ubuntu1?arch=source&distro=esm-apps/focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.0+20180213-0ubuntu1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / ippsample

Package

Name
ippsample
Purl
pkg:deb/ubuntu/ippsample@0.0+20180213-0ubuntu1?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.0+20180213-0ubuntu1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.10 / ippsample

Package

Name
ippsample
Purl
pkg:deb/ubuntu/ippsample@0.0+20180213-0ubuntu3?arch=source&distro=oracular

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.0+20180213-0ubuntu3

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.04:LTS / ippsample

Package

Name
ippsample
Purl
pkg:deb/ubuntu/ippsample@0.0+20180213-0ubuntu3?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.0+20180213-0ubuntu1
0.0+20180213-0ubuntu2
0.0+20180213-0ubuntu3

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:25.04 / ippsample

Package

Name
ippsample
Purl
pkg:deb/ubuntu/ippsample@0.0+20180213-0ubuntu3?arch=source&distro=plucky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.0+20180213-0ubuntu3

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}