Lucene search
HistoryJun 30, 2023 - 7:15 p.m.
CVE-2023-37365
hnswlib vulnerability init_index double_free
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
24.1%
Hnswlib 0.7.0 has a double free in init_index when the M argument is a large integer.
Affected configurations
Node
hnswlib_projecthnswlibMatch0.7.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| hnswlib_project | hnswlib | 0.7.0 | cpe:2.3:a:hnswlib_project:hnswlib:0.7.0:*:*:*:*:*:*:* |
References
Related
debiancve
debiancve
CVE-2023-37365
2023-06-30 19:15:09
prion
prion
Double free
2023-06-30 19:15:00
cve
cve
CVE-2023-37365
2023-06-30 19:15:09
osv
osv
hnswlib Double Free vulnerability
2023-06-30 21:30:26
CVE-2023-37365
2023-06-30 19:15:09
ubuntucve
ubuntucve
CVE-2023-37365
2023-06-30 00:00:00
github
github
hnswlib Double Free vulnerability
2023-06-30 21:30:26
cvelist
cvelist
CVE-2023-37365
2023-06-30 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
24.1%
Related for NVD:CVE-2023-37365