Linuxsecurity

Denial of Service Vulnerabilities in TeX Live Affecting Ubuntu Releases

First seen 30 Jan 2026, 06:57 UTC • Ubuntu

•28.7

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Shin Ando discovered vulnerabilities in the Xpdf toolkit embedded in TeX Live, which could lead to denial of service or arbitrary code execution. The affected Ubuntu releases include 20.04 LTS and 22.04 LTS, with potential impacts on users tricked into opening malicious documents.

How this analysis works

Attack Flow

9 entities, 13 inferred relationships (STIX 2.1).

Technique (2)

Data Breach
DDoS

Organization (1)

Ubuntu

Vulnerability (4)

CVE-2022-24106
CVE-2022-24107
CVE-2023-32668
CVE-2024-25262

Affected Platform (2)

TeX Live
Xpdf Toolkit

Relationships

CVE-2022-24106 targets TeX Live
CVE-2022-24106 targets Xpdf Toolkit
CVE-2022-24107 targets TeX Live
CVE-2022-24107 targets Xpdf Toolkit
CVE-2023-32668 targets TeX Live
CVE-2023-32668 targets Xpdf Toolkit
CVE-2024-25262 targets TeX Live
CVE-2024-25262 targets Xpdf Toolkit
Data Breach targets TeX Live
Data Breach targets Xpdf Toolkit
DDoS targets TeX Live
DDoS targets Xpdf Toolkit
CVE-2022-24106 related to Ubuntu

Continue Reading

Critical RCE Vulnerability in Rails Active Storage Disclosed Critical NGINX Vulnerability CVE-2026-42945 Exposes Millions to RCE and DoS Attacks Supply Chain Attack Compromises DAEMON Tools with Malicious Backdoor Critical Januscape Vulnerability in Linux KVM Exposes Cloud Servers to Attacks Multiple rsync Vulnerabilities Affect Ubuntu 22.04, 24.04, 25.10, and 26.04 LTS Critical ldns Vulnerability in Ubuntu Allows Spoofed DNS Responses

Denial of Service Vulnerabilities in TeX Live Affecting Ubuntu Releases

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading