PT-2022-7124 · Pypi+1 · Pypdf2+1

Martinthoma · Published 2022-09-07 · Updated 2023-07-10 · CVE-2023-36807

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions PyPDF2 versions prior to 2.10.6

Description The issue is related to a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. An attacker can craft a PDF that leads to an infinite loop, blocking the current process and utilizing a single core of the CPU by 100%. This does not affect memory usage. For example, this can occur when a user extracts metadata from a malformed PDF. The infinite loop can be triggered when the read object function in PyPDF2/generic/ data structures.py is called.

Recommendations To resolve the issue, upgrade to version 2.10.6 or later. If an upgrade is not possible, modify PyPDF2/generic/ data structures.py::read object to throw an error when encountering an invalid elementary object, by replacing the existing code with the provided patch.

Exploit

Fix

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

BDU:2023-07661

CVE-2023-36807

GHSA-HM9V-VJ3R-R55M

Affected Products

Astra Linux

Pypdf2

References · 18

• 🔥 https://github.com/py-pdf/pypdf/security/advisories/GHSA-hm9v-vj3r-r55m · Exploit
• 🔥 https://github.com/py-pdf/pypdf/issues/1329 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/36xxx/CVE-2023-36807.json · Exploit
• https://github.com/py-pdf/pypdf/pull/1331 · Patch
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-0416SE47 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-hm9v-vj3r-r55m · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-36807 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-1023SE17 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-36807 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-36807 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07661 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-36807 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-36807 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-36807 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-36807 · Vendor Advisory