Segmentation Violation in OTFCC Commit 617837b in texlive-bin
Summary
CVE-2022-35023: OTFCC commit 617837b was discovered to contain a segmentation violation via /lib/x86_64-linux-gnu/libc.so.6+0xbb384. Affects texlive-bin versions 2022.20220321.62855-5.1 – 2025.20250727.75242+ds-5~hurd.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
texlive-bin is a package in the Debian ecosystem that provides the TeX Live distribution. It includes various binaries and libraries for typesetting documents using TeX. The package is widely used by developers and users for LaTeX document preparation. However, a vulnerability has been discovered in the package's OTFCC commit 617837b, which can lead to a segmentation violation.
Vulnerability Detail
The vulnerability in OTFCC commit 617837b of texlive-bin is caused by a segmentation violation in the libc.so.6 library. This violation can be triggered under certain conditions, potentially leading to a crash or other unintended behavior. The impact of this vulnerability can vary depending on the context in which the package is used. It is important to note that this vulnerability has a CVSS score of 6.5, indicating a moderate severity level.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
At the moment, no specific workaround has been provided for this vulnerability. It is advised to follow the recommended fix and update the texlive-bin package to a patched version as soon as it becomes available.
Conclusion
In conclusion, the OTFCC commit 617837b in texlive-bin has been found to contain a segmentation violation vulnerability. It is recommended to update the package to a patched version as soon as it becomes available. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for texlive-bin →
FAQ
texlive-bin is a package in the Debian ecosystem that provides the TeX Live distribution, used for typesetting documents using TeX.
The impact of this vulnerability can vary depending on the context in which the package is used. It can potentially lead to crashes or other unintended behavior.
A segmentation violation, also known as a segmentation fault, occurs when a program tries to access a memory location that it is not allowed to access. This can happen due to programming errors or vulnerabilities.
The CVSS score of this vulnerability is 6.5, indicating a moderate severity level.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities without requiring access to the code or installation.
Related vulnerabilities
Recent vulnerabilities recorded for texlive-bin.
