Rapid7 Vulnerability & Exploit Database

CentOS Linux: CVE-2023-32700: Important: texlive security update (CESA-2023:3661)

Free InsightVM Trial No Credit Card Necessary
2024 Attack Intel Report Latest research by Rapid7 Labs
Back to Search

CentOS Linux: CVE-2023-32700: Important: texlive security update (CESA-2023:3661)

Severity
4
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
Published
05/20/2023
Created
06/21/2023
Added
06/20/2023
Modified
06/20/2023

Description

LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.

Solution(s)

  • centos-upgrade-texlive
  • centos-upgrade-texlive-adjustbox
  • centos-upgrade-texlive-ae
  • centos-upgrade-texlive-algorithms
  • centos-upgrade-texlive-alphalph
  • centos-upgrade-texlive-amscls
  • centos-upgrade-texlive-amsfonts
  • centos-upgrade-texlive-amsmath
  • centos-upgrade-texlive-anyfontsize
  • centos-upgrade-texlive-anysize
  • centos-upgrade-texlive-appendix
  • centos-upgrade-texlive-arabxetex
  • centos-upgrade-texlive-arphic
  • centos-upgrade-texlive-atbegshi
  • centos-upgrade-texlive-attachfile
  • centos-upgrade-texlive-attachfile2
  • centos-upgrade-texlive-atveryend
  • centos-upgrade-texlive-auxhook
  • centos-upgrade-texlive-avantgar
  • centos-upgrade-texlive-awesomebox
  • centos-upgrade-texlive-babel
  • centos-upgrade-texlive-babel-english
  • centos-upgrade-texlive-babelbib
  • centos-upgrade-texlive-base
  • centos-upgrade-texlive-beamer
  • centos-upgrade-texlive-bera
  • centos-upgrade-texlive-beton
  • centos-upgrade-texlive-bibtex
  • centos-upgrade-texlive-bibtex-debuginfo
  • centos-upgrade-texlive-bibtopic
  • centos-upgrade-texlive-bidi
  • centos-upgrade-texlive-bigfoot
  • centos-upgrade-texlive-bigintcalc
  • centos-upgrade-texlive-bitset
  • centos-upgrade-texlive-bookman
  • centos-upgrade-texlive-bookmark
  • centos-upgrade-texlive-booktabs
  • centos-upgrade-texlive-breakurl
  • centos-upgrade-texlive-breqn
  • centos-upgrade-texlive-capt-of
  • centos-upgrade-texlive-caption
  • centos-upgrade-texlive-carlisle
  • centos-upgrade-texlive-catchfile
  • centos-upgrade-texlive-changebar
  • centos-upgrade-texlive-changepage
  • centos-upgrade-texlive-charter
  • centos-upgrade-texlive-chngcntr
  • centos-upgrade-texlive-cite
  • centos-upgrade-texlive-cjk
  • centos-upgrade-texlive-classpack
  • centos-upgrade-texlive-cm
  • centos-upgrade-texlive-cm-lgc
  • centos-upgrade-texlive-cm-super
  • centos-upgrade-texlive-cmap
  • centos-upgrade-texlive-cmextra
  • centos-upgrade-texlive-cns
  • centos-upgrade-texlive-collectbox
  • centos-upgrade-texlive-collection-basic
  • centos-upgrade-texlive-collection-fontsrecommended
  • centos-upgrade-texlive-collection-htmlxml
  • centos-upgrade-texlive-collection-latex
  • centos-upgrade-texlive-collection-latexrecommended
  • centos-upgrade-texlive-collection-xetex
  • centos-upgrade-texlive-colorprofiles
  • centos-upgrade-texlive-colortbl
  • centos-upgrade-texlive-context
  • centos-upgrade-texlive-courier
  • centos-upgrade-texlive-crop
  • centos-upgrade-texlive-csquotes
  • centos-upgrade-texlive-ctable
  • centos-upgrade-texlive-ctablestack
  • centos-upgrade-texlive-currfile
  • centos-upgrade-texlive-datetime
  • centos-upgrade-texlive-debuginfo
  • centos-upgrade-texlive-debugsource
  • centos-upgrade-texlive-dehyph
  • centos-upgrade-texlive-dvipdfmx
  • centos-upgrade-texlive-dvipng
  • centos-upgrade-texlive-dvipng-debuginfo
  • centos-upgrade-texlive-dvips
  • centos-upgrade-texlive-dvips-debuginfo
  • centos-upgrade-texlive-dvisvgm
  • centos-upgrade-texlive-dvisvgm-debuginfo
  • centos-upgrade-texlive-ec
  • centos-upgrade-texlive-eepic
  • centos-upgrade-texlive-enctex
  • centos-upgrade-texlive-enumitem
  • centos-upgrade-texlive-environ
  • centos-upgrade-texlive-epsf
  • centos-upgrade-texlive-epstopdf
  • centos-upgrade-texlive-epstopdf-pkg
  • centos-upgrade-texlive-eqparbox
  • centos-upgrade-texlive-eso-pic
  • centos-upgrade-texlive-etex
  • centos-upgrade-texlive-etex-pkg
  • centos-upgrade-texlive-etexcmds
  • centos-upgrade-texlive-etoc
  • centos-upgrade-texlive-etoolbox
  • centos-upgrade-texlive-euenc
  • centos-upgrade-texlive-euler
  • centos-upgrade-texlive-euro
  • centos-upgrade-texlive-eurosym
  • centos-upgrade-texlive-extsizes
  • centos-upgrade-texlive-fancybox
  • centos-upgrade-texlive-fancyhdr
  • centos-upgrade-texlive-fancyref
  • centos-upgrade-texlive-fancyvrb
  • centos-upgrade-texlive-filecontents
  • centos-upgrade-texlive-filehook
  • centos-upgrade-texlive-finstrut
  • centos-upgrade-texlive-fix2col
  • centos-upgrade-texlive-fixlatvian
  • centos-upgrade-texlive-float
  • centos-upgrade-texlive-fmtcount
  • centos-upgrade-texlive-fncychap
  • centos-upgrade-texlive-fontawesome
  • centos-upgrade-texlive-fontbook
  • centos-upgrade-texlive-fonts-tlwg
  • centos-upgrade-texlive-fontspec
  • centos-upgrade-texlive-fontware
  • centos-upgrade-texlive-fontware-debuginfo
  • centos-upgrade-texlive-fontwrap
  • centos-upgrade-texlive-footmisc
  • centos-upgrade-texlive-footnotehyper
  • centos-upgrade-texlive-fp
  • centos-upgrade-texlive-fpl
  • centos-upgrade-texlive-framed
  • centos-upgrade-texlive-garuda-c90
  • centos-upgrade-texlive-geometry
  • centos-upgrade-texlive-gettitlestring
  • centos-upgrade-texlive-glyphlist
  • centos-upgrade-texlive-graphics
  • centos-upgrade-texlive-graphics-cfg
  • centos-upgrade-texlive-graphics-def
  • centos-upgrade-texlive-grfext
  • centos-upgrade-texlive-grffile
  • centos-upgrade-texlive-gsftopk
  • centos-upgrade-texlive-gsftopk-debuginfo
  • centos-upgrade-texlive-hanging
  • centos-upgrade-texlive-helvetic
  • centos-upgrade-texlive-hobsub
  • centos-upgrade-texlive-hologo
  • centos-upgrade-texlive-hycolor
  • centos-upgrade-texlive-hyperref
  • centos-upgrade-texlive-hyph-utf8
  • centos-upgrade-texlive-hyphen-base
  • centos-upgrade-texlive-hyphenat
  • centos-upgrade-texlive-hyphenex
  • centos-upgrade-texlive-ifetex
  • centos-upgrade-texlive-ifluatex
  • centos-upgrade-texlive-ifmtarg
  • centos-upgrade-texlive-ifoddpage
  • centos-upgrade-texlive-ifplatform
  • centos-upgrade-texlive-iftex
  • centos-upgrade-texlive-ifxetex
  • centos-upgrade-texlive-import
  • centos-upgrade-texlive-index
  • centos-upgrade-texlive-infwarerr
  • centos-upgrade-texlive-intcalc
  • centos-upgrade-texlive-jadetex
  • centos-upgrade-texlive-jknapltx
  • centos-upgrade-texlive-kastrup
  • centos-upgrade-texlive-kerkis
  • centos-upgrade-texlive-knuth-lib
  • centos-upgrade-texlive-knuth-local
  • centos-upgrade-texlive-koma-script
  • centos-upgrade-texlive-kpathsea
  • centos-upgrade-texlive-kpathsea-debuginfo
  • centos-upgrade-texlive-kvdefinekeys
  • centos-upgrade-texlive-kvoptions
  • centos-upgrade-texlive-kvsetkeys
  • centos-upgrade-texlive-l3backend
  • centos-upgrade-texlive-l3experimental
  • centos-upgrade-texlive-l3kernel
  • centos-upgrade-texlive-l3packages
  • centos-upgrade-texlive-lastpage
  • centos-upgrade-texlive-latex
  • centos-upgrade-texlive-latex-fonts
  • centos-upgrade-texlive-latex2man
  • centos-upgrade-texlive-latexbug
  • centos-upgrade-texlive-latexconfig
  • centos-upgrade-texlive-letltxmacro
  • centos-upgrade-texlive-lettrine
  • centos-upgrade-texlive-lib
  • centos-upgrade-texlive-lib-debuginfo
  • centos-upgrade-texlive-linegoal
  • centos-upgrade-texlive-lineno
  • centos-upgrade-texlive-listings
  • centos-upgrade-texlive-listofitems
  • centos-upgrade-texlive-lm
  • centos-upgrade-texlive-lm-math
  • centos-upgrade-texlive-ltabptch
  • centos-upgrade-texlive-ltxcmds
  • centos-upgrade-texlive-ltxmisc
  • centos-upgrade-texlive-lua-alt-getopt
  • centos-upgrade-texlive-luahbtex
  • centos-upgrade-texlive-luahbtex-debuginfo
  • centos-upgrade-texlive-luajittex-debuginfo
  • centos-upgrade-texlive-lualatex-math
  • centos-upgrade-texlive-lualibs
  • centos-upgrade-texlive-luaotfload
  • centos-upgrade-texlive-luatex
  • centos-upgrade-texlive-luatex-debuginfo
  • centos-upgrade-texlive-luatex85
  • centos-upgrade-texlive-luatexbase
  • centos-upgrade-texlive-lwarp
  • centos-upgrade-texlive-makecmds
  • centos-upgrade-texlive-makeindex
  • centos-upgrade-texlive-makeindex-debuginfo
  • centos-upgrade-texlive-manfnt-font
  • centos-upgrade-texlive-marginnote
  • centos-upgrade-texlive-marvosym
  • centos-upgrade-texlive-mathpazo
  • centos-upgrade-texlive-mathspec
  • centos-upgrade-texlive-mathtools
  • centos-upgrade-texlive-mdwtools
  • centos-upgrade-texlive-memoir
  • centos-upgrade-texlive-metafont
  • centos-upgrade-texlive-metafont-debuginfo
  • centos-upgrade-texlive-metalogo
  • centos-upgrade-texlive-metapost
  • centos-upgrade-texlive-metapost-debuginfo
  • centos-upgrade-texlive-mflogo
  • centos-upgrade-texlive-mflogo-font
  • centos-upgrade-texlive-mfnfss
  • centos-upgrade-texlive-mfware
  • centos-upgrade-texlive-mfware-debuginfo
  • centos-upgrade-texlive-microtype
  • centos-upgrade-texlive-minitoc
  • centos-upgrade-texlive-mnsymbol
  • centos-upgrade-texlive-modes
  • centos-upgrade-texlive-mparhack
  • centos-upgrade-texlive-mptopdf
  • centos-upgrade-texlive-ms
  • centos-upgrade-texlive-multido
  • centos-upgrade-texlive-multirow
  • centos-upgrade-texlive-natbib
  • centos-upgrade-texlive-ncctools
  • centos-upgrade-texlive-ncntrsbk
  • centos-upgrade-texlive-needspace
  • centos-upgrade-texlive-newfloat
  • centos-upgrade-texlive-newunicodechar
  • centos-upgrade-texlive-norasi-c90
  • centos-upgrade-texlive-notoccite
  • centos-upgrade-texlive-ntgclass
  • centos-upgrade-texlive-oberdiek
  • centos-upgrade-texlive-obsolete
  • centos-upgrade-texlive-overpic
  • centos-upgrade-texlive-palatino
  • centos-upgrade-texlive-paralist
  • centos-upgrade-texlive-parallel
  • centos-upgrade-texlive-parskip
  • centos-upgrade-texlive-passivetex
  • centos-upgrade-texlive-pdfcolmk
  • centos-upgrade-texlive-pdfescape
  • centos-upgrade-texlive-pdflscape
  • centos-upgrade-texlive-pdfpages
  • centos-upgrade-texlive-pdftex
  • centos-upgrade-texlive-pdftex-debuginfo
  • centos-upgrade-texlive-pdftexcmds
  • centos-upgrade-texlive-pgf
  • centos-upgrade-texlive-philokalia
  • centos-upgrade-texlive-placeins
  • centos-upgrade-texlive-plain
  • centos-upgrade-texlive-polyglossia
  • centos-upgrade-texlive-powerdot
  • centos-upgrade-texlive-preprint
  • centos-upgrade-texlive-psfrag
  • centos-upgrade-texlive-pslatex
  • centos-upgrade-texlive-psnfss
  • centos-upgrade-texlive-pspicture
  • centos-upgrade-texlive-pst-3d
  • centos-upgrade-texlive-pst-arrow
  • centos-upgrade-texlive-pst-blur
  • centos-upgrade-texlive-pst-coil
  • centos-upgrade-texlive-pst-eps
  • centos-upgrade-texlive-pst-fill
  • centos-upgrade-texlive-pst-grad
  • centos-upgrade-texlive-pst-math
  • centos-upgrade-texlive-pst-node
  • centos-upgrade-texlive-pst-plot
  • centos-upgrade-texlive-pst-slpe
  • centos-upgrade-texlive-pst-text
  • centos-upgrade-texlive-pst-tools
  • centos-upgrade-texlive-pst-tree
  • centos-upgrade-texlive-pstricks
  • centos-upgrade-texlive-pstricks-add
  • centos-upgrade-texlive-ptext
  • centos-upgrade-texlive-pxfonts
  • centos-upgrade-texlive-qstest
  • centos-upgrade-texlive-ragged2e
  • centos-upgrade-texlive-rcs
  • centos-upgrade-texlive-realscripts
  • centos-upgrade-texlive-refcount
  • centos-upgrade-texlive-rerunfilecheck
  • centos-upgrade-texlive-rsfs
  • centos-upgrade-texlive-sansmath
  • centos-upgrade-texlive-sansmathaccent
  • centos-upgrade-texlive-sauerj
  • centos-upgrade-texlive-scheme-basic
  • centos-upgrade-texlive-section
  • centos-upgrade-texlive-sectsty
  • centos-upgrade-texlive-seminar
  • centos-upgrade-texlive-sepnum
  • centos-upgrade-texlive-setspace
  • centos-upgrade-texlive-showexpl
  • centos-upgrade-texlive-soul
  • centos-upgrade-texlive-stackengine
  • centos-upgrade-texlive-stmaryrd
  • centos-upgrade-texlive-stringenc
  • centos-upgrade-texlive-subfig
  • centos-upgrade-texlive-subfigure
  • centos-upgrade-texlive-svn-prov
  • centos-upgrade-texlive-symbol
  • centos-upgrade-texlive-t2
  • centos-upgrade-texlive-tabu
  • centos-upgrade-texlive-tabulary
  • centos-upgrade-texlive-tetex
  • centos-upgrade-texlive-tex
  • centos-upgrade-texlive-tex-debuginfo
  • centos-upgrade-texlive-tex-gyre
  • centos-upgrade-texlive-tex-gyre-math
  • centos-upgrade-texlive-tex-ini-files
  • centos-upgrade-texlive-tex4ht
  • centos-upgrade-texlive-tex4ht-debuginfo
  • centos-upgrade-texlive-texconfig
  • centos-upgrade-texlive-texlive-common-doc
  • centos-upgrade-texlive-texlive-docindex
  • centos-upgrade-texlive-texlive-en
  • centos-upgrade-texlive-texlive-infra
  • centos-upgrade-texlive-texlive-msg-translations
  • centos-upgrade-texlive-texlive-scripts
  • centos-upgrade-texlive-texlive-scripts-extra
  • centos-upgrade-texlive-textcase
  • centos-upgrade-texlive-textpos
  • centos-upgrade-texlive-threeparttable
  • centos-upgrade-texlive-thumbpdf
  • centos-upgrade-texlive-times
  • centos-upgrade-texlive-tipa
  • centos-upgrade-texlive-titlesec
  • centos-upgrade-texlive-titling
  • centos-upgrade-texlive-tocloft
  • centos-upgrade-texlive-tools
  • centos-upgrade-texlive-translator
  • centos-upgrade-texlive-trimspaces
  • centos-upgrade-texlive-txfonts
  • centos-upgrade-texlive-type1cm
  • centos-upgrade-texlive-typehtml
  • centos-upgrade-texlive-ucharcat
  • centos-upgrade-texlive-ucharclasses
  • centos-upgrade-texlive-ucs
  • centos-upgrade-texlive-uhc
  • centos-upgrade-texlive-ulem
  • centos-upgrade-texlive-underscore
  • centos-upgrade-texlive-unicode-data
  • centos-upgrade-texlive-unicode-math
  • centos-upgrade-texlive-uniquecounter
  • centos-upgrade-texlive-unisugar
  • centos-upgrade-texlive-updmap-map
  • centos-upgrade-texlive-upquote
  • centos-upgrade-texlive-url
  • centos-upgrade-texlive-utopia
  • centos-upgrade-texlive-varwidth
  • centos-upgrade-texlive-wadalab
  • centos-upgrade-texlive-was
  • centos-upgrade-texlive-wasy
  • centos-upgrade-texlive-wasy-type1
  • centos-upgrade-texlive-wasy2-ps
  • centos-upgrade-texlive-wasysym
  • centos-upgrade-texlive-wrapfig
  • centos-upgrade-texlive-xcolor
  • centos-upgrade-texlive-xdvi
  • centos-upgrade-texlive-xdvi-debuginfo
  • centos-upgrade-texlive-xecjk
  • centos-upgrade-texlive-xecolor
  • centos-upgrade-texlive-xecyr
  • centos-upgrade-texlive-xeindex
  • centos-upgrade-texlive-xepersian
  • centos-upgrade-texlive-xesearch
  • centos-upgrade-texlive-xetex
  • centos-upgrade-texlive-xetex-debuginfo
  • centos-upgrade-texlive-xetex-itrans
  • centos-upgrade-texlive-xetex-pstricks
  • centos-upgrade-texlive-xetex-tibetan
  • centos-upgrade-texlive-xetexconfig
  • centos-upgrade-texlive-xetexfontinfo
  • centos-upgrade-texlive-xifthen
  • centos-upgrade-texlive-xkeyval
  • centos-upgrade-texlive-xltxtra
  • centos-upgrade-texlive-xmltex
  • centos-upgrade-texlive-xmltexconfig
  • centos-upgrade-texlive-xstring
  • centos-upgrade-texlive-xtab
  • centos-upgrade-texlive-xunicode
  • centos-upgrade-texlive-zapfchan
  • centos-upgrade-texlive-zapfding
  • centos-upgrade-texlive-zref

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
  • Lightweight Endpoint Agent
  • Live Dashboards
  • Real Risk Prioritization
  • IT-Integrated Remediation Projects
  • Cloud, Virtual, and Container Assessment
  • Integrated Threat Feeds
  • Easy-to-Use RESTful API
  • Automation-Assisted Patching
  • Automated Containment
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;