CVE-2024-8827 — Out-of-bounds Write in Pdf-tools

Vendor	Product	Version range	Fixed in
github.com	argoproj_argo-cd_v2	>= 0 < 2.8.13	2.8.13
github.com	argoproj_argo-cd_v2	>= 2.10.0 < 2.10.4	2.10.4
github.com	argoproj_argo-cd_v2	>= 2.9.0 < 2.9.9	2.9.9
pdf-xchange	pdf-tools	—	—
pdf-xchange	pdf-xchange_editor	—	—

GHSA

GHSA-59cm-59x5-cwhh: PDF-XChange Editor PPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ghsa_unreviewed·2024-11-22

CVE-2024-8827 [HIGH] CWE-787 GHSA-59cm-59x5-cwhh: PDF-XChange Editor PPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability PDF-XChange Editor PPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PPM files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24306.

GHSA

Bypassing Rate Limit and Brute Force Protection Using Cache Overflow

ghsa·2024-03-18

CVE-2024-21662 [MEDIUM] CWE-307 Bypassing Rate Limit and Brute Force Protection Using Cache Overflow Bypassing Rate Limit and Brute Force Protection Using Cache Overflow ### Summary An attacker can effectively bypass the rate limit and brute force protections by exploiting the application's weak cache-based mechanism. This loophole in security can be combined with other vulnerabilities to attack the default admin account. This flaw undermines a previously [patched CVE](https://argo-cd.readthedocs.io/en/stable/security_considerations/#cve-2020-8827-insufficient-anti-automationanti-brute-force) intended to protect against brute-force attacks. ### Details The application's brute force protection relies on a cache mechanism that tracks login attempts for each user. This cache is limited to a `defaultMaxCacheSize` of 1000 entries. An attacker can overflow this cache by bombarding it with log

Red Hat

argo-cd: Bypassing Rate Limit and Brute Force Protection Using Cache Overflow

vendor_redhat·2024-03-18·CVSS 7.5

CVE-2024-21662 [HIGH] CWE-307 argo-cd: Bypassing Rate Limit and Brute Force Protection Using Cache Overflow argo-cd: Bypassing Rate Limit and Brute Force Protection Using Cache Overflow Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.8.13, 2.9.9, and 2.10.4, an attacker can effectively bypass the rate limit and brute force protections by exploiting the application's weak cache-based mechanism. This loophole in security can be combined with other vulnerabilities to attack the default admin account. This flaw undermines a patch for CVE-2020-8827 intended to protect against brute-force attacks. The application's brute force protection relies on a cache mechanism that tracks login attempts for each user. This cache is limited to a `defaultMaxCacheSize` of 1000 entries. An attacker can overflow this cache by bombarding it with login attempts for differen

CVE-2024-8827: PDF-XChange Editor PPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…

Affected

CVSS provenance