Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2023-26924
HistoryMar 27, 2023 - 10:15 p.m.

CVE-2023-26924

2023-03-2722:15:21
Debian Security Bug Tracker
security-tracker.debian.org
10
segfault
llvm
mlir
outlinesingleblockregion
cve-2023-26924
unix
security policy
undesirable behavior

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

5.1%

LLVM a0dab4950 has a segmentation fault in mlir::outlineSingleBlockRegion. NOTE: third parties dispute this because the LLVM security policy excludes “Language front-ends … for which a malicious input file can cause undesirable behavior.”

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0

Percentile

5.1%

Related for DEBIANCVE:CVE-2023-26924