CVE-2023-2663
CVE-2023-2663 · Stack overflow in Xpdf 4.04 due to object loop in PDF page label tree
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In Xpdf 4.04 (and earlier), a PDF object loop in the page label tree leads to infinite recursion and a stack overflow.
CVSS 2.9 · Low · EPSS 0.5%
- Published
- Updated
Stack: system
Affected products and versions
xpdf
- Versions
- 4.04: Affected
No fix published
ipe Ubuntu:16.04:LTS
- Versions
- 7.1.4-2.1
- 7.1.8-1
- 7.1.10-1
- 7.1.10-1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:16.04:LTS
- Versions
- 3.03-17ubuntu2
- 3.03-17ubuntu3
- 3.03-17ubuntu5
- 3.03-18
- 3.04-1
- 3.04-1build1
- 3.04-1ubuntu1
- 3.04-1ubuntu1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:18.04:LTS
- Versions
- 7.2.7-2
- 7.2.7-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:18.04:LTS
- Versions
- 3.04-4build1
- 3.04-5
- 3.04-5ubuntu2
- 3.04-6ubuntu1
- 3.04-7
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:20.04:LTS
- Versions
- 7.2.9-1
- 7.2.13-2
- 7.2.13-2build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:22.04:LTS
- Versions
- 7.2.23+dfsg1-2
- 7.2.24+dfsg1-1
- 7.2.24+dfsg1-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:22.04:LTS
- Versions
- 3.04+git20210103-3build1
- 3.04+git20211021-1
- 3.04+git20211021-1ubuntu1
- 3.04+git20220201-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:24.04:LTS
- Versions
- 7.2.27+dfsg1-2
- 7.2.28-2
- 7.2.28-2.1build2
- 7.2.28-2.1build3
- 7.2.28-2.1build4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:24.04:LTS
- Versions
- 3.04+git20220601-1ubuntu1
- 3.04+git20220601-1ubuntu2
- 3.04+git20231213-1
- 3.04+git20240118-1
- 3.04+git20240124-1
- 3.04+git20240202-1
- 3.04+git20240202-1build1
- 3.04+git20240202-1build2
- 3.04+git20240202-1build3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:25.10
- Versions
- 7.2.30-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:25.10
- Versions
- 3.04+git20250304-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:26.10
- Versions
- 7.2.30-1build2
- 7.2.30-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:26.10
- Versions
- 3.04+git20260220-1
- 3.04+git20260220-1ubuntu1
- 3.04+git20260802-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:26.04:LTS
- Versions
- 7.2.30-1build1
- 7.2.30-1build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:26.04:LTS
- Versions
- 3.04+git20250304-1
- 3.04+git20250304-1build1
- 3.04+git20260220-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published