LLVM Toolchain vulnerabilities

2023-07-2700:00:00

ubuntu.com

llvm toolchain

memory management

ubuntu 23.04

ubuntu 22.04 lts

denial of service

mlir file

vulnerabilities

cve-2023-29932

cve-2023-29934

cve-2023-29939

cve-2023-29933

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Releases

Ubuntu 23.04
Ubuntu 22.04 LTS

Packages

llvm-toolchain-13 - C, C++ and Objective-C compiler
llvm-toolchain-14 - C, C++ and Objective-C compiler
llvm-toolchain-15 - C, C++ and Objective-C compiler

Details

It was discovered that LLVM Toolchain did not properly manage memory under
certain circumstances. If a user were tricked into opening a specially
crafted MLIR file, an attacker could possibly use this issue to cause LLVM
Toolchain to crash, resulting in a denial of service. (CVE-2023-29932,
CVE-2023-29934, CVE-2023-29939)

OSVersionArchitecturePackageVersionFilename
Ubuntu23.04noarchmlir-15-tools< 1:15.0.7-3ubuntu0.23.04.1UNKNOWN
Ubuntu23.04noarchbolt-15< 1:15.0.7-3ubuntu0.23.04.1UNKNOWN
Ubuntu23.04noarchbolt-15-dbgsym< 1:15.0.7-3ubuntu0.23.04.1UNKNOWN
Ubuntu23.04noarchclang-15< 1:15.0.7-3ubuntu0.23.04.1UNKNOWN
Ubuntu23.04noarchclang-15-dbgsym< 1:15.0.7-3ubuntu0.23.04.1UNKNOWN
Ubuntu23.04noarchclang-15-doc< 1:15.0.7-3ubuntu0.23.04.1UNKNOWN
Ubuntu23.04noarchclang-15-examples< 1:15.0.7-3ubuntu0.23.04.1UNKNOWN
Ubuntu23.04noarchclang-format-15< 1:15.0.7-3ubuntu0.23.04.1UNKNOWN
Ubuntu23.04noarchclang-format-15-dbgsym< 1:15.0.7-3ubuntu0.23.04.1UNKNOWN
Ubuntu23.04noarchclang-tidy-15< 1:15.0.7-3ubuntu0.23.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	23.04	noarch	mlir-15-tools	< 1:15.0.7-3ubuntu0.23.04.1	UNKNOWN
Ubuntu	23.04	noarch	bolt-15	< 1:15.0.7-3ubuntu0.23.04.1	UNKNOWN
Ubuntu	23.04	noarch	bolt-15-dbgsym	< 1:15.0.7-3ubuntu0.23.04.1	UNKNOWN
Ubuntu	23.04	noarch	clang-15	< 1:15.0.7-3ubuntu0.23.04.1	UNKNOWN
Ubuntu	23.04	noarch	clang-15-dbgsym	< 1:15.0.7-3ubuntu0.23.04.1	UNKNOWN
Ubuntu	23.04	noarch	clang-15-doc	< 1:15.0.7-3ubuntu0.23.04.1	UNKNOWN
Ubuntu	23.04	noarch	clang-15-examples	< 1:15.0.7-3ubuntu0.23.04.1	UNKNOWN
Ubuntu	23.04	noarch	clang-format-15	< 1:15.0.7-3ubuntu0.23.04.1	UNKNOWN
Ubuntu	23.04	noarch	clang-format-15-dbgsym	< 1:15.0.7-3ubuntu0.23.04.1	UNKNOWN
Ubuntu	23.04	noarch	clang-tidy-15	< 1:15.0.7-3ubuntu0.23.04.1	UNKNOWN