Lucene search

MitreCVE-2023-26924

HistoryMar 27, 2023 - 10:15 p.m.

CVE-2023-26924

2023-03-2722:15:21

CWE-120

mitre

web.nvd.nist.gov

llvm

cve-2023-26924

segmentation fault

mlir

nvd

security policy

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.5

Confidence

High

EPSS

Percentile

5.1%

JSON

LLVM a0dab4950 has a segmentation fault in mlir::outlineSingleBlockRegion. NOTE: third parties dispute this because the LLVM security policy excludes “Language front-ends … for which a malicious input file can cause undesirable behavior.”

Affected configurations

Nvd

Node

llvmllvmMatch2023-01-22

VendorProductVersionCPE
llvmllvm2023-01-22cpe:2.3:a:llvm:llvm:2023-01-22:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
llvm	llvm	2023-01-22	cpe:2.3:a:llvm:llvm:2023-01-22:::::::*

References

gist.github.com/Colloportus0/fc16d10d74aedf89d5d1d020ebb89c0c

github.com/llvm/llvm-project/issues/60216

llvm.org/docs/Security.html#what-is-considered-a-security-issue

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.5

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2023-26924