Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-50572
HistoryDec 29, 2023 - 12:00 a.m.

CVE-2023-50572

2023-12-2900:00:00
ubuntu.com
ubuntu.com
7
cve-2023-50572
groovyengine.execute
jline-groovy v3.24.1
outofmemory error
defaultprinter.java
bugs
ubuntu
unix

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

High

EPSS

0

Percentile

12.7%

An issue in the component GroovyEngine.execute of jline-groovy v3.24.1
allows attackers to cause an OOM (OutofMemory) error.

Bugs

Notes

Author Note
rodrigo-zaiden vulnerable code, DefaultPrinter.java, was added in version 3.16.0. Ubuntu is probably not affected.
OSVersionArchitecturePackageVersionFilename
ubuntu22.04noarchjline3< anyUNKNOWN
ubuntu24.04noarchjline3< anyUNKNOWN

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

High

EPSS

0

Percentile

12.7%