Lucene search

K
cveMitreCVE-2023-37365
HistoryJun 30, 2023 - 7:15 p.m.

CVE-2023-37365

2023-06-3019:15:09
CWE-415
mitre
web.nvd.nist.gov
23
cve-2023-37365
nvd
information security
vulnerability
hnswlib 0.7.0

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

24.1%

Hnswlib 0.7.0 has a double free in init_index when the M argument is a large integer.

Affected configurations

Nvd
Node
hnswlib_projecthnswlibMatch0.7.0
VendorProductVersionCPE
hnswlib_projecthnswlib0.7.0cpe:2.3:a:hnswlib_project:hnswlib:0.7.0:*:*:*:*:*:*:*

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

24.1%