Detections
Analytics

Debian dla-3507 : libghc-pandoc-dev - security update

medium Nessus Plugin ID 178788

Language:

Synopsis

The remote Debian host is missing one or more security-related updates.

Description

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3507 advisory.

 ------------------------------------------------------------------------- Debian LTS Advisory DLA-3507-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin July 25, 2023 https://wiki.debian.org/LTS
 -------------------------------------------------------------------------

 Package : pandoc Version : 2.2.1-3+deb10u1 CVE ID : CVE-2023-35936 CVE-2023-38745 Debian Bug : 1041976

 Arbitrary file write vulnerabilities were discovered in pandoc, an Haskell library and CLI tool for converting from one markup format to another. These vulnerabilities can be triggered by providing a specially crafted image element in the input when generating files using the `--extract-media` option or outputting to PDF format, and allow an attacker to create or overwrite arbitrary files on the system (depending on the privileges of the process running pandoc).

 CVE-2023-35936

 Entroy C discovered that appending percent-encoded directory components to the end of malicious data: URI, an attacker could trick pandoc into creating or or overwriting arbitrary files on the system.

 CVE-2023-38745

 I discovered that the upstream fix for CVE-2023-35936 was incomplete, namely that the vulnerability remained when encoding '%' characters as '%25'.

 For Debian 10 buster, these problems have been fixed in version 2.2.1-3+deb10u1.

 We recommend that you upgrade your pandoc packages.

 For the detailed security status of pandoc please refer to its security tracker page at:
 https://security-tracker.debian.org/tracker/pandoc

 Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS Attachment:
 signature.asc Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Upgrade the libghc-pandoc-dev packages.

See Also

https://security-tracker.debian.org/tracker/source-package/pandoc

https://security-tracker.debian.org/tracker/CVE-2023-35936

https://security-tracker.debian.org/tracker/CVE-2023-38745

https://packages.debian.org/source/buster/pandoc

Plugin Details

Severity: Medium

ID: 178788

File Name: debian_DLA-3507.nasl

Version: 1.5

Type: local

Agent: unix

Published: 7/25/2023

Updated: 1/22/2025

Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.7

CVSS v2

Risk Factor: Medium

Base Score: 5.6

Temporal Score: 4.4

Vector: CVSS2#AV:L/AC:H/Au:N/C:N/I:C/A:C

CVSS Score Source: CVE-2023-38745

CVSS v3

Risk Factor: Medium

Base Score: 6.3

Temporal Score: 5.7

Vector: CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

CPE: p-cpe:/a:debian:debian_linux:libghc-pandoc-doc, cpe:/o:debian:debian_linux:10.0, p-cpe:/a:debian:debian_linux:pandoc-data, p-cpe:/a:debian:debian_linux:libghc-pandoc-dev, p-cpe:/a:debian:debian_linux:libghc-pandoc-prof, p-cpe:/a:debian:debian_linux:pandoc

Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 7/25/2023

Vulnerability Publication Date: 7/5/2023

Reference Information

CVE: CVE-2023-35936, CVE-2023-38745

IAVB: 2024-B-0030