CVE-2022-23319: 
Linux Debian vulnerability analysis and mitigation

A segmentation fault vulnerability was discovered in pcf2bdf versions >=1.05 that allows an attacker to trigger a program crash via a specially crafted PCF font file. The vulnerability was assigned CVE-2022-23319 and was disclosed on February 17, 2022. The issue affects the PCF file parsing functionality and impacts the availability of the software and dependent downstream components (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Medium) with vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. The issue is related to improper validation of specified quantity in input (CWE-1284) during PCF file parsing. When processing malformed PCF font files, the application can crash due to a segmentation fault (NVD).

The vulnerability affects the availability of the pcf2bdf software and any dependent downstream components. When exploited, it can cause the application to crash, resulting in a denial of service condition (NVD).

The vulnerability has been fixed in version 1.07 released on February 23, 2022. Users are advised to upgrade to this version which includes patches for both CVE-2022-23319 and CVE-2022-23318 (GitHub).