Veracode Vulnerability DatabaseVERACODE:30554Denial Of Service (DoS)
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
pandoc is vulnerable to denial of service. The table extension in GitHub Flavored Markdown takes O(n * n) time to parse certain inputs. An attacker could craft a markdown table which would take an unreasonably long time to process, causing a denial of service.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pandoc | eq | 2.0.6__4.el8 | |
| r-cran-commonmark:sid | eq | 1.7-2 | |
| pandoc | eq | 2.0.6__4.el8 | |
| r-cran-commonmark:sid | eq | 1.7-2 |
References
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/
access.redhat.com/errata/RHSA-2021:1972
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=1854328
github.com/github/cmark-gfm/commit/85d895289c5ab67f988ca659493a64abb5fec7b4
github.com/github/cmark-gfm/security/advisories/GHSA-7gc6-9qr5-hc85
lists.fedoraproject.org/archives/list/[email protected]/message/TCDHBTUFIOYRIS5HAS6PZNBNMB7IOAX3/
lists.fedoraproject.org/archives/list/[email protected]/message/WMQFOQQCWOAMQ4I2XIVCVOXXIJ75HDCW/
lists.fedoraproject.org/archives/list/[email protected]/message/ZGJH2A4VAV54X6NSCNNGSEIGIIY5N2VR/
Related
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P