Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS13amNjLWNxNzktcDYzZs4AA21E

Possible Infinite Loop when PdfWriter(clone_from) is used with a PDF

Impact

An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop.
This infinite loop blocks the current process and can utilize a single core of the CPU by 100%. It does not affect memory usage.

That is, for example, the case when the pypdf-user manipulates an incoming malicious PDF e.g. by merging it with another PDF or by adding annotations.

Patches

The issue was fixed with #2264

Workarounds

If you cannot update your version of pypdf, you should modify pypdf/generic/_data_structures.py just like #2264 did.

Permalink: https://github.com/advisories/GHSA-wjcc-cq79-p63f
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13amNjLWNxNzktcDYzZs4AA21E
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: about 1 year ago
Updated: 11 months ago

CVSS Score: 5.1
CVSS vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Percentage: 0.00049
EPSS Percentile: 0.2044

Identifiers: GHSA-wjcc-cq79-p63f, CVE-2023-46250
References:

• https://github.com/py-pdf/pypdf/security/advisories/GHSA-wjcc-cq79-p63f
• https://nvd.nist.gov/vuln/detail/CVE-2023-46250
• https://github.com/py-pdf/pypdf/pull/2264
• https://github.com/py-pdf/pypdf/commit/9b23ac3c9619492570011d551d521690de9a3e2d
• https://github.com/advisories/GHSA-wjcc-cq79-p63f

Repository: https://github.com/py-pdf/pypdf
Blast Radius: 18.3

Affected Packages