PT-2024-13324 · Tex Live+2 · Tex Live+2

Duck + 1 · Published 2024-01-26 · Updated 2024-11-29 · CVE-2023-46051

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions TeX Live version 944e257

Description The issue in TeX Live allows a NULL pointer dereference in the tounicode.c file, located in texk/web2c/pdftexdir. However, it is noted that this issue is disputed and might be categorized as a usability problem rather than a security vulnerability. There is no information provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

Recommendations For TeX Live version 944e257, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2023-46051

OESA-2024-2000

OPENSUSE-SU-2024_1310-1

SUSE-SU-2024:1310-1

Affected Products

Debian

Suse

Tex Live

References · 25

• https://osv.dev/vulnerability/SUSE-SU-2024:1310-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-46051 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-46051 · Security Note
• https://ubuntu.com/security/CVE-2023-46051 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-46048 · Security Note
• https://osv.dev/vulnerability/CVE-2023-46051 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-2000 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-46051 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-46051 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-46051 · Vendor Advisory
• https://t.me/cvenotify/88294 · Telegram Post
• https://suse.com/support/update/announcement/2024/suse-su-20241310-1 · Note
• https://bugzilla.suse.com/1222127 · Note
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2000 · Note
• https://twitter.com/CVEnew/status/1772858545152700683 · Twitter Post