PT-2023-32599 · Apryse · Apryse Itext

Alkaidlx + 1 · Published 2023-11-26 · Updated 2024-05-17 · CVE-2023-6299

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Apryse iText version 8.0.1

Description A memory leak issue has been found in the Reference Table Handler component, specifically affecting the processing of the file PdfDocument.java. This issue can be exploited remotely, leading to a memory leak. The exploit has been disclosed to the public.

Recommendations For Apryse iText version 8.0.1, upgrade to version 8.0.2 to address this issue.

Exploit

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2023-6299

Affected Products

Apryse Itext

References · 10

• 🔥 https://drive.google.com/file/d/1_jeD7SvuliKc_02pPTPbfSnqAErzmFny/view?usp=sharing · Exploit
• https://osv.dev/vulnerability/CVE-2023-6299 · Vendor Advisory
• https://kb.itextpdf.com/home/it7kb/releases/release-itext-core-8-0-2#ReleaseiTextCore8.0.2-Bugfixesandmiscellaneous · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-6299 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-6299 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-6299 · Security Note
• https://ubuntu.com/security/CVE-2023-6299 · Vendor Advisory
• https://vuldb.com/?ctiid.246125 · Note
• https://vuldb.com/?id.246125 · Note
• https://t.me/cvenotify/61492 · Telegram Post