Lucene search
Ubuntu.comUB:CVE-2023-46046HistoryMar 27, 2024 - 12:00 a.m.
CVE-2023-46046
2024-03-2700:00:00
ubuntu.com
ubuntu.com
11
minizinc
null pointer dereference
crafted file
unattended process
DISPUTED An issue in MiniZinc before 2.8.0 allows a NULL pointer
dereference via ti_expr in a crafted .mzn file. NOTE: this is disputed
because there is no common libminizinc use case in which an unattended
process is supposed to run forever to process a series of
atttacker-controlled .mzn files.
References
seclists.org/fulldisclosure/2024/Jan/63
github.com/MiniZinc/libminizinc/commit/afe67acc20898e4308044b54c4acf7a08df544f0
github.com/MiniZinc/libminizinc/issues/730
launchpad.net/bugs/cve/CVE-2023-46046
nvd.nist.gov/vuln/detail/CVE-2023-46046
security-tracker.debian.org/tracker/CVE-2023-46046
www.cve.org/CVERecord?id=CVE-2023-46046
www.minizinc.org/doc-2.8.3/en/changelog.html
Related
cvelist
cvelist
CVE-2023-46046
2024-03-27 00:00:00
debiancve
debiancve
CVE-2023-46046
2024-03-27 05:15:47
nvd
nvd
CVE-2023-46046
2024-03-27 05:15:47
veracode
veracode
NULL Pointer Dereference
2024-04-06 06:18:33
cve
cve
CVE-2023-46046
2024-03-27 05:15:47