CVE-2022-38266CWE-369

CVE-2022-38266

Medium · published September 10, 2022

CVSS v3.1
6.5
EPSS
1%
Percentile
73.1
In the wild
Unconfirmed
What it is

An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) via a crafted JPEG file.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01449 · 73.1th percentile
Weakness
CWE-369 · Divide By Zero
Published
2022-09-10T02:15Z
Affected products (3)
ProductVersionsFixed in
tesseract-ocr/tesseract_ocrall versions—
leptonica/leptonica< 1.80.01.80.0
debian/debian_linuxall versions—
References (8)
https://github.com/DanBloomberg/leptonica/commit/f062b42c0ea8dddebdc6a152fd16152de215d614 · [email protected]https://github.com/tesseract-ocr/tesseract/issues/3498 · [email protected]https://lists.debian.org/debian-lts-announce/2022/12/msg00018.html · [email protected]https://security.gentoo.org/glsa/202312-01 · [email protected]https://github.com/DanBloomberg/leptonica/commit/f062b42c0ea8dddebdc6a152fd16152de215d614 · af854a3a-2127-422b-91ae-364da2661108https://github.com/tesseract-ocr/tesseract/issues/3498 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2022/12/msg00018.html · af854a3a-2127-422b-91ae-364da2661108https://security.gentoo.org/glsa/202312-01 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 09 SEP 00:00Z
    An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) via a crafted JPEG…
    cvelistv5