Vulnerabilities > CVE-2022-41957

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

muhammara-project

hummus-project

NVD

Published: 2022-11-28

Updated: 2024-11-21

Summary

Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. The package muhammara before 2.6.2 and from 3.0.0 and before 3.3.0, as well as all versions of muhammara's predecessor package hummus, are vulnerable to Denial of Service (DoS) when supplied with a maliciously crafted PDF file to be parsed. The issue has been patched in muhammara version 3.4.0 and the fix has been backported to version 2.6.2. As a workaround, do not process files from untrusted sources. If using hummus, replace the package with muhammara.

Vulnerable Configurations

Part	Description	Count
Application	Muhammara_Project Muhammara Project Muhammara - Muhammara Project Muhammara 1.0.0 Muhammara Project Muhammara 1.0.1 Muhammara Project Muhammara 1.1.0 Muhammara Project Muhammara 1.2.0 Muhammara Project Muhammara 1.3.0 Muhammara Project Muhammara 1.4.0 Muhammara Project Muhammara 1.4.1 Muhammara Project Muhammara 1.4.2 Muhammara Project Muhammara 1.4.3 Muhammara Project Muhammara 1.5.0 Muhammara Project Muhammara 1.5.1 Muhammara Project Muhammara 1.6.0 Muhammara Project Muhammara 1.7.0 Muhammara Project Muhammara 1.8.0 Muhammara Project Muhammara 1.9.0 Muhammara Project Muhammara 1.10.0 Muhammara Project Muhammara 2.0.0 Muhammara Project Muhammara 2.1.0 Muhammara Project Muhammara 2.2.0 Muhammara Project Muhammara 2.3.0 Muhammara Project Muhammara 2.4.0 Muhammara Project Muhammara 2.5.0 Muhammara Project Muhammara 2.6.0 Muhammara Project Muhammara 2.6.1 Muhammara Project Muhammara 3.0.0 Muhammara Project Muhammara 3.1.0 Muhammara Project Muhammara 3.1.1 Muhammara Project Muhammara 3.2.0	32
Application	Hummus_Project Hummus Project Hummus *	1

Vulnerabilities > CVE-2022-41957 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2022-41957"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2022-41957