CVE Vulnerabilities

CVE-2021-3508

Loop with Unreachable Exit Condition ('Infinite Loop')

Published: Apr 28, 2021 | Modified: Dec 21, 2022
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

A flaw was found in PDFResurrect in version 0.22b. There is an infinite loop in get_xref_linear_skipped() in pdf.c via a crafted PDF file.

Weakness

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected Software

Name Vendor Start Version End Version
Pdfresurrect Pdfresurrect_project 0.22b (including) 0.22b (including)
Pdfresurrect Ubuntu bionic *
Pdfresurrect Ubuntu devel *
Pdfresurrect Ubuntu esm-apps/bionic *
Pdfresurrect Ubuntu esm-apps/focal *
Pdfresurrect Ubuntu esm-apps/jammy *
Pdfresurrect Ubuntu esm-apps/noble *
Pdfresurrect Ubuntu esm-apps/xenial *
Pdfresurrect Ubuntu focal *
Pdfresurrect Ubuntu groovy *
Pdfresurrect Ubuntu hirsute *
Pdfresurrect Ubuntu impish *
Pdfresurrect Ubuntu jammy *
Pdfresurrect Ubuntu kinetic *
Pdfresurrect Ubuntu lunar *
Pdfresurrect Ubuntu mantic *
Pdfresurrect Ubuntu noble *
Pdfresurrect Ubuntu oracular *
Pdfresurrect Ubuntu trusty *
Pdfresurrect Ubuntu trusty/esm *
Pdfresurrect Ubuntu upstream *
Pdfresurrect Ubuntu xenial *

References