UBUNTU-CVE-2024-44337

🗓️ 15 Oct 2024 20:15:00Reported by GoogleType

osv🔗 osv.dev👁 2 Views

Fix DoS in markdown parser by commit a2a9c4f76ef5a5c32108e36f7c47f8d310322252; earlier versions had infinite loop.

Reporter	Title	Published	Views	Family All 44
GithubExploit	Exploit for CVE-2024-44337	15 Oct 202413:44	–	githubexploit
CBLMariner	CVE-2024-44337 affecting package cri-o for versions less than 1.22.3-11	28 Mar 202518:18	–	cbl_mariner
Chainguard	CVE-2024-44337 vulnerabilities	15 Oct 202420:15	–	cgr
Circl	CVE-2024-44337	15 Oct 202422:47	–	circl
CNNVD	Markdown 安全漏洞	15 Oct 202400:00	–	cnnvd
CVE	CVE-2024-44337	15 Oct 202400:00	–	cve
Cvelist	CVE-2024-44337	15 Oct 202400:00	–	cvelist
Debian CVE	CVE-2024-44337	15 Oct 202400:00	–	debiancve
Github Security Blog	Infinite loop in github.com/gomarkdown/markdown	15 Oct 202421:30	–	github
Microsoft CVE	The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and rendering as HTML. Prior to pseudoversion `v0.0.0-20240729232818-a2a9c4f`, which corresponds with commit `a2a9c4f76ef5a5c32108e36f7c47f8d310322252`, there was a logical problem in the paragraph function of the parser/block.go file, which allowed a remote attacker to cause a denial of service (DoS) condition by providing a tailor-made input that caused an infinite loop, causing the program to hang and consume resources indefinitely. Submit `a2a9c4f76ef5a5c32108e36f7c47f8d310322252` contains fixes to this problem.	4 Sep 202503:31	–	mscve