CVC5 Solver Security Vulnerability

cvc5 is a tool in the cvc5 open source. It is used to determine the satisfiability of first-order formulas modulo first-order theories or combinations of these theories. A security vulnerability exists in CVC5 Solver version v1.1.3, which stems from a segmentation error that allows an attacker to...

CVE-2024-37795

A segmentation fault exists in CVC5 Solver v1.1.3 , which allows an attacker to trigger a Denial of Service (DoS) . The root cause is a processing error when handling a crafted SMT-LIB input file containing the set-logic command with specific formatting errors. The vulnerability is associated wit...

CVE-2024-37795

A segmentation fault in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service DoS via a crafted SMT-LIB input file containing the "set-logic" command with specific formatting errors...

CVE-2024-37795: Out-of-bounds Read

A segmentation fault in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service DoS via a crafted SMT-LIB input file containing the set-logic command with specific formatting errors...

CVE-2024-37794: Improper Input Validation

Improper input validation in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service DoS via a crafted SMT2 input file...

CVE-2024-37794

Improper input validation in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service DoS via a crafted SMT2 input file...

CVC5 Solver Security Vulnerability

cvc5 is a tool in the cvc5 open source. It is used to determine the satisfiability of first-order formulas modulo first-order theories or combinations of these theories. A security vulnerability exists in CVC5 Solver version v1.1.3 that stems from improper input validation and allows an attacker ...

CVE-2024-37794

Improper input validation in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service DoS via a crafted SMT2 input file...

CVE-2024-37794

The CVC5 Solver v1.1.3 is vulnerable to a Denial of Service (DoS) attack due to improper input validation . An attacker can trigger this condition by providing a crafted SMT2 input file . While the vulnerability is documented across multiple Linux distributions (including Debian and Ubuntu) and v...

PT-2024-27754 · Unknown +1 · Cvc5 Solver +1

Name of the Vulnerable Software and Affected Versions: CVC5 Solver version 1.1.3 Description: The issue is related to improper input validation, which allows attackers to cause a Denial of Service DoS by providing a crafted SMT2 input file. Recommendations: For version 1.1.3, update to a newer...

CVE-2024-37794

Improper input validation in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service DoS via a crafted SMT2 input file...

CVE-2024-37795

A segmentation fault in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service DoS via a crafted SMT-LIB input file containing the set-logic command with specific formatting errors...

CVE-2024-37794

Improper input validation in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service DoS via a crafted SMT2 input file...

ab-tune (0.1.0), ac-solver (0.1.0) +814 more potentially affected by CVE-2024-31584 via torch (>=2.0.0, <=2.1.2)

torch PYPI version =2.0.0, =0.0.2, =1.2.3, =0.0.2, =0.2.3, =0.0.2, =0.0.0, =1.9.0, =0.0.3, =0.0.7 and more Source cves: CVE-2024-31584 Source advisory: SNYK:PYTHON-TORCH-14534878...

ab-tune (0.1.0), ac-solver (0.1.0) +814 more potentially affected by CVE-2024-31583 via torch (>=2.0.0, <=2.1.2)

torch PYPI version =2.0.0, =0.0.2, =1.2.3, =0.0.2, =0.2.3, =0.0.2, =0.0.0, =1.9.0, =0.0.3, =0.0.7 and more Source cves: CVE-2024-31583 Source advisory: GHSA-PG7H-5QX3-WJR3...

ab-tune (0.1.0), ac-solver (0.1.0) +814 more potentially affected by CVE-2024-31583 via torch (>=2.0.0, <=2.1.2)

torch PYPI version =2.0.0, =0.0.2, =1.2.3, =0.0.2, =0.2.3, =0.0.2, =0.0.0, =1.9.0, =0.0.3, =0.0.7 and more Source cves: CVE-2024-31583 Source advisory: OSV:PYSEC-2024-251...

ai.timefold.solver:timefold-solver-quarkus (0.8.40), ai.timefold.solver:timefold-solver-quarkus-benchmark (0.8.40) +876 more potentially affected by CVE-2024-2700 via io.quarkus:quarkus-core (2.16.9.final)

io.quarkus:quarkus-core MAVEN version 2.16.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-core and may be impacted: - ai.timefold.solver:timefold-solver-quarkus 0.8.40 - ai.timefold.solver:timefold-solver-quarkus-benchmark...

ai.timefold.solver:timefold-solver-quarkus (>=0.9.38, <=1.1.0), ai.timefold.solver:timefold-solver-quarkus-benchmark (>=0.9.38, <=1.1.0) +2724 more potentially affected by CVE-2024-2700 via io.quarkus:quarkus-core (>=3.0.0.alpha1, <=3.2.11.final)

io.quarkus:quarkus-core MAVEN version =3.0.0.alpha1, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =1.1.0 - br.com.labbs:quarkus-monitor-reactive 2.0.0 and more Source cves: CVE-2024-2700https://vulners.com/cve/CVE-...

ai.timefold.solver:timefold-solver-quarkus (>=0.9.38, <=1.1.0), ai.timefold.solver:timefold-solver-quarkus-benchmark (>=0.9.38, <=1.1.0) +2724 more potentially affected by CVE-2024-2700 via io.quarkus:quarkus-core (>=3.0.0.alpha1, <=3.2.11.final)

io.quarkus:quarkus-core MAVEN version =3.0.0.alpha1, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =0.9.38, =1.1.0 - br.com.labbs:quarkus-monitor-reactive 2.0.0 and more Source cves: CVE-2024-2700https://vulners.com/cve/CVE-...

ai.timefold.solver:timefold-solver-quarkus (>=1.2.0, <=1.9.0), ai.timefold.solver:timefold-solver-quarkus-benchmark (>=1.2.0, <=1.9.0) +2626 more potentially affected by CVE-2024-2700 via io.quarkus:quarkus-core (>=3.3.0.cr1, <=3.8.3)

io.quarkus:quarkus-core MAVEN version =3.3.0.cr1, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =1.2.0, =0.0.10, =0.0.14 and more Source cves: CVE-2024-2700 Source a...