KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted mathematical expressions could encounter malicious input using `\def` or `\newcommand` that causes a near-infinite loop, despite setting `maxExpand` to avoid such loops. KaTeX supports an option named maxExpand which aims to prevent infinitely recursive macros from consuming all available memory and/or triggering a stack overflow error. Unfortunately, support for "Unicode (sub|super)script characters" allows an attacker to bypass this limit. Each sub/superscript group instantiated a separate Parser with its own limit on macro executions, without inheriting the current count of macro executions from its parent. This has been corrected in KaTeX v0.16.10.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted     mathematical expressions could encounter malicious input using `\def` or `\newcommand` that causes a near-     infinite loop, despite setting `maxExpand` to avoid such loops. KaTeX supports an option named maxExpand     which aims to prevent infinitely recursive macros from consuming all available memory and/or triggering a     stack overflow error. Unfortunately, support for Unicode (sub|super)script characters allows an attacker     to bypass this limit. Each sub/superscript group instantiated a separate Parser with its own limit on     macro executions, without inheriting the current count of macro executions from its parent. This has been     corrected in KaTeX v0.16.10. (CVE-2024-28244)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - KaTeX is a JavaScript library for TeX math rendering on the web. KaTeX users who render untrusted
    mathematical expressions could encounter malicious input using `\def` or `\newcommand` that causes a near-
    infinite loop, despite setting `maxExpand` to avoid such loops. KaTeX supports an option named maxExpand
    which aims to prevent infinitely recursive macros from consuming all available memory and/or triggering a
    stack overflow error. Unfortunately, support for "Unicode (sub|super)script characters" allows an attacker
    to bypass this limit. Each sub/superscript group instantiated a separate Parser with its own limit on
    macro executions, without inheriting the current count of macro executions from its parent. This has been
    corrected in KaTeX v0.16.10. (CVE-2024-28244)

ID	Name	Product	Family	Type	Severity
227820	Linux Distros Unpatched Vulnerability : CVE-2024-28244	Nessus	Misc.	Local	medium
414115	SCA: security update for katex (GHSA-cvr6-37gx-v8wc)	Tenable Cloud Security	SCA Checks	Local	medium
414115	SCA: security update for katex (GHSA-cvr6-37gx-v8wc)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2024-28244

medium

Tenable Plugins

medium

medium

medium