PatchTheCVEscience-miner vulnerabilities
Recent CVEs affecting science-miner products. 5 tracked.
science-miner has 5 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-11-10. Highest priority: CVE-2020-23874 (score 65/100).
- CVE-2020-23877 CRITICAL 9.8 DOWNGRADE pdf2xml v2.0 was discovered to contain a stack buffer overflow in the component getObjectStream.
- CVE-2020-23876 HIGH 7.5 DOWNGRADE pdf2xml v2.0 was discovered to contain a memory leak in the function TextPage::testLinkedText.
- CVE-2020-23874 CRITICAL 9.8 DOWNGRADE pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::addAttributsNode.
- CVE-2020-23873 CRITICAL 9.8 DOWNGRADE pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::dump.
- CVE-2020-23872 HIGH 7.5 DOWNGRADE A NULL pointer dereference in the function TextPage::restoreState of pdf2xml v2.0 allows attackers to cause a
FAQ
How do I fix science-miner vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is science-miner being exploited right now?
None of the tracked science-miner CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which science-miner CVE should I patch first?
CVE-2020-23874 currently ranks highest (65/100): pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::addAttributsNode..