p PatchFirst

CVE-2023-3044

CVE-2023-3044 · Divide-by-zero in Xpdf 4.04 due to very large page size

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a divide-by-zero in Xpdf's text extraction code. This is related to CVE-2022-30524, but the problem here is caused by a very large page size, rather than by a very large character coordinate.

CVSS 3.3 · Low · EPSS 0.3%

Published
Updated

Stack: system

Affected products and versions

  • xpdf

    Versions
    • 4.04: Affected

    No fix published

  • ipe Ubuntu:16.04:LTS

    Versions
    • 7.1.4-2.1
    • 7.1.8-1
    • 7.1.10-1
    • 7.1.10-1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xpdf Ubuntu:16.04:LTS

    Versions
    • 3.03-17ubuntu2
    • 3.03-17ubuntu3
    • 3.03-17ubuntu5
    • 3.03-18
    • 3.04-1
    • 3.04-1build1
    • 3.04-1ubuntu1
    • 3.04-1ubuntu1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:18.04:LTS

    Versions
    • 7.2.7-2
    • 7.2.7-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xpdf Ubuntu:18.04:LTS

    Versions
    • 3.04-4build1
    • 3.04-5
    • 3.04-5ubuntu2
    • 3.04-6ubuntu1
    • 3.04-7
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:20.04:LTS

    Versions
    • 7.2.9-1
    • 7.2.13-2
    • 7.2.13-2build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:22.04:LTS

    Versions
    • 7.2.23+dfsg1-2
    • 7.2.24+dfsg1-1
    • 7.2.24+dfsg1-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xpdf Ubuntu:22.04:LTS

    Versions
    • 3.04+git20210103-3build1
    • 3.04+git20211021-1
    • 3.04+git20211021-1ubuntu1
    • 3.04+git20220201-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:24.04:LTS

    Versions
    • 7.2.27+dfsg1-2
    • 7.2.28-2
    • 7.2.28-2.1build2
    • 7.2.28-2.1build3
    • 7.2.28-2.1build4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xpdf Ubuntu:24.04:LTS

    Versions
    • 3.04+git20220601-1ubuntu1
    • 3.04+git20220601-1ubuntu2
    • 3.04+git20231213-1
    • 3.04+git20240118-1
    • 3.04+git20240124-1
    • 3.04+git20240202-1
    • 3.04+git20240202-1build1
    • 3.04+git20240202-1build2
    • 3.04+git20240202-1build3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:25.10

    Versions
    • 7.2.30-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xpdf Ubuntu:25.10

    Versions
    • 3.04+git20250304-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:26.10

    Versions
    • 7.2.30-1build2
    • 7.2.30-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xpdf Ubuntu:26.10

    Versions
    • 3.04+git20260220-1
    • 3.04+git20260220-1ubuntu1
    • 3.04+git20260802-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:26.04:LTS

    Versions
    • 7.2.30-1build1
    • 7.2.30-1build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xpdf Ubuntu:26.04:LTS

    Versions
    • 3.04+git20250304-1
    • 3.04+git20250304-1build1
    • 3.04+git20260220-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →