Lucene search

K
ubuntucveUbuntu.comUB:CVE-2020-18378
HistoryAug 22, 2023 - 12:00 a.m.

CVE-2020-18378

2023-08-2200:00:00
ubuntu.com
ubuntu.com
6
cve-2020-18378
segmentation fault
denial-of-service
sexpressionwasmbuilder
binaryen 1.38.26
wasm input

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

27.2%

A NULL pointer dereference was discovered in
SExpressionWasmBuilder::makeBlock in wasm/wasm-s-parser.c in Binaryen
1.38.26. A crafted wasm input can cause a segmentation fault, leading to
denial-of-service, as demonstrated by wasm-as.

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

27.2%

Related for UB:CVE-2020-18378