CVE-2022-45586: 
NixOS vulnerability analysis and mitigation

A stack overflow vulnerability was identified in xpdf version 4.04, specifically in the Dict::find function located in xpdf/Dict.cc. The vulnerability was assigned CVE-2022-45586 and was published on February 15, 2023. This security flaw affects the xpdf document viewer software (NVD, CVE Mitre).

The vulnerability is classified as an Out-of-bounds Write (CWE-787) with a CVSS v3.1 base score of 5.5 (Medium). The vulnerability has the following vector string: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H, indicating local attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no impact on confidentiality and integrity, but high impact on availability (NVD).

When exploited, this vulnerability allows local attackers to cause a denial of service condition in the affected system. The impact is primarily focused on system availability, with no direct effect on confidentiality or integrity (NVD, Ubuntu Security).

For Debian-based systems, it's worth noting that the xpdf package uses poppler instead of the vulnerable xpdf implementation, thus making these systems not affected by this vulnerability (Debian Tracker).