Linux Distros Unpatched Vulnerability : CVE-2023-37365

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hnswlib 0.7.0 has a double free in initindex when the M argument is a large integer. CVE-2023-37365 Note that Nessus relies on the presence of the package as...

CVE-2023-37365

Hnswlib 0.7.0 has a double free in initindex when the M argument is a large integer...

cytocluster (>=0.1.0 <=0.1.13), frogbase (>=2.0.0a1 <=2.0.0a4) +15 more potentially affected by CVE-2023-37365 via hnswlib (>=0.3.4 <=0.7.0)

hnswlib PYPI version =0.3.4, =0.1.0, =2.0.0a1, =0.0.1, =0.6.1, =0.0.11, =0.0.7, =0.1.0, =0.1.0, =0.0.2, =0.1.0, =0.1.1, =0.1.0, =0.13.0, =0.19.0 and more Source cves: CVE-2023-37365 Source advisory: OSV:GHSA-XWC8-RF6M-XR86...

CVE-2023-37365

CVE-2023-37365 affects hnswlib 0.7.0 and involves a double free in the function init_index when the M argument is a large integer. The available connected sources consistently state this as a double-free vulnerability in hnswlib’s init_index, with no detailed vendor/patch/version information prov...