Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-2664: A stack-overflow in xpdf4.04 - forum.xpdfreader.com

In Xpdf 4.04 (and earlier), a PDF object loop in the embedded file tree leads to infinite recursion and a stack overflow.

CVE
#vulnerability#ubuntu#c++#pdf

BabyBus

Posts: 4

Joined: Tue Apr 11, 2023 5:23 am

A stack-overflow in xpdf4.04

We found another stack overflow vulnerability in xpdf4.04,at Catalog::readEmbeddedFileTree(Object*) xpdf-4.04/xpdf/Catalog.cc:766.

Command Input

poc_file are attached.

Sanitizer Dump

Code: Select all

AddressSanitizer:DEADLYSIGNAL
=================================================================
==2689742==ERROR: AddressSanitizer: stack-overflow on address 0x7fff983ccf88 (pc 0x0000004cec06 bp 0x7fff983cd7d0 sp 0x7fff983ccf90 T0)
    #0 0x4cec06 in __asan_memcpy /root/test/fuzzing_python/llvm-project-llvmorg-12.0.0/compiler-rt/lib/asan/asan_interceptors_memintrinsics.cpp:22:3
    #1 0x6b1ad8 in Object::copy(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Object.cc:81:8
    #2 0x726369 in XRef::fetch(int, int, Object*, int) /root/target/Invariants/xpdf-4.04/xpdf/XRef.cc:1212:20
    #3 0x6b1f0c in Object::fetch(XRef*, Object*, int) /root/target/Invariants/xpdf-4.04/xpdf/Object.cc:116:16
    #4 0x55f8b6 in Dict::lookup(char const*, Object*, int) /root/target/Invariants/xpdf-4.04/xpdf/Dict.cc:125:35
    #5 0x51fa83 in Object::dictLookup(char const*, Object*, int) /root/target/Invariants/xpdf-4.04/xpdf/Object.h:267:18
    #6 0x5380f2 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:771:15
    #7 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #8 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #9 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #10 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #11 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #12 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #13 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #14 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #15 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #16 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #17 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #18 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #19 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #20 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #21 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #22 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #23 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #24 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #25 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #26 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #27 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #28 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #29 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #30 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #31 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #32 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #33 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #34 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #35 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #36 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #37 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #38 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #39 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #40 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #41 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #42 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #43 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #44 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #45 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #46 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #47 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #48 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #49 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #50 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #51 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #52 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #53 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #54 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #55 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #56 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #57 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #58 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #59 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #60 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #61 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #62 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #63 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #64 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #65 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #66 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #67 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #68 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #69 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #70 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #71 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #72 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #73 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #74 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #75 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #76 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #77 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #78 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #79 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #80 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #81 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #82 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #83 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #84 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #85 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #86 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #87 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #88 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #89 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #90 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #91 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #92 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #93 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #94 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #95 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #96 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #97 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #98 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #99 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #100 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #101 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #102 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #103 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #104 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #105 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #106 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #107 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #108 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #109 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #110 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #111 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #112 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #113 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #114 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #115 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #116 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #117 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #118 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #119 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #120 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #121 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #122 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #123 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #124 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #125 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #126 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #127 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #128 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #129 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #130 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #131 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #132 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #133 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #134 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #135 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #136 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #137 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #138 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #139 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #140 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #141 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #142 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #143 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #144 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #145 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #146 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #147 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #148 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #149 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #150 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #151 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #152 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #153 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #154 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #155 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #156 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #157 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #158 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #159 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #160 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #161 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #162 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #163 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #164 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #165 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #166 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #167 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #168 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #169 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #170 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #171 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #172 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #173 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #174 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #175 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #176 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #177 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #178 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #179 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #180 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #181 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #182 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #183 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #184 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #185 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #186 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #187 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #188 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #189 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #190 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #191 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #192 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #193 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #194 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #195 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #196 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #197 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #198 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #199 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #200 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #201 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #202 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #203 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #204 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #205 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #206 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #207 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #208 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #209 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #210 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #211 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #212 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #213 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #214 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #215 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #216 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #217 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #218 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #219 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #220 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #221 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #222 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #223 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #224 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #225 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #226 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #227 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #228 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #229 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #230 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #231 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #232 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #233 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #234 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #235 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #236 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #237 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #238 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #239 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #240 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #241 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #242 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #243 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #244 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #245 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #246 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #247 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2
    #248 0x5380b7 in Catalog::readEmbeddedFileTree(Object*) /root/target/Invariants/xpdf-4.04/xpdf/Catalog.cc:766:2

SUMMARY: AddressSanitizer: stack-overflow /root/test/fuzzing_python/llvm-project-llvmorg-12.0.0/compiler-rt/lib/asan/asan_interceptors_memintrinsics.cpp:22:3 in __asan_memcpy
==2689742==ABORTING

Environment

  • OS: Ubuntu 20.04.1

  • clang:12.0.0

  • xpdf:4.04

Attachments

poc_file.zip

(12.55 KiB) Downloaded 10 times

BabyBus

Posts: 4

Joined: Tue Apr 11, 2023 5:23 am

Re: A stack-overflow in xpdf4.04

Post by BabyBus » Thu May 04, 2023 10:01 am

Thank you for your prompt response regarding the object loop vulnerability that I reported. I appreciate that you are actively working on a more robust loop detector for Xpdf 5 to address this issue.

As this vulnerability has security implications, I would like to request a CVE identifier to track the public disclosure and resolution of the issue. Please let me know if there is any additional information or evidence I can provide to assist with your CVE application process.

Thank you again for your attention to this matter.

Related news

Gentoo Linux Security Advisory 202409-25

Gentoo Linux Security Advisory 202409-25 - Multiple vulnerabilities have been found in Xpdf, the worst of which could result in denial of service. Versions greater than or equal to 4.05 are affected.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907