PT-2023-21713 · Pdfio+1 · Pdfio+1

Cyberitech · Publicado 2023-03-20 · Atualizado 2023-03-24 · CVE-2023-28428

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions PDFio versions 1.1.0 and prior

Description A denial of service issue exists in the pdfio parser, where crafted PDF files can cause the program to run at 100% utilization and never terminate.

Recommendations For PDFio versions 1.1.0 and prior, update to version 1.1.1 to resolve the issue.

Exploit

Correção

DoS

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

CVE-2023-28428

GHSA-68X8-9PHF-J7JF

Produtos afetados

Debian

Pdfio

Referências · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/28xxx/CVE-2023-28428.json · Exploit
• https://github.com/michaelrsweet/pdfio/commit/97d4955666779dc5b0665e15dd951a5c12426a31 · Correção
• https://github.com/michaelrsweet/pdfio/security/advisories/GHSA-68x8-9phf-j7jf · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-28428 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-28428 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-28428 · Aviso do Fabricante
• https://t.me/cibsecurity/60321 · Publicação no Telegram
• https://security-tracker.debian.org/tracker/CVE-2023-28428 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-28428 · Aviso do Fabricante
• https://t.me/cvenotify/46799 · Publicação no Telegram
• https://cve.org/CVERecord?id=CVE-2023-28428 · Nota de Segurança
• https://ubuntu.com/security/CVE-2023-28428 · Aviso do Fabricante