Veracode Vulnerability DatabaseVERACODE:38073Denial Of Service (DoS)
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
48.4%
libcmark-gfm.so is vulnerable to denial of service. The vulnerability exists in multiple functions of inlines.c due to unbounded resource exhaustion which allows an attacker to crash the application via malicious input.
References
en.wikipedia.org/wiki/Time_complexity
github.com/github/cmark-gfm/commit/9d57d8a23142b316282bdfc954cb0ecda40a8655
github.com/github/cmark-gfm/security/advisories/GHSA-cgh3-p57x-9q7q
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIUCZN3PEKUCT2JQYQTYOVIJG2KSD6G7/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMGP65NANDVKPDMXMKYO2ZV2H2HZJY4P/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UEAAAI4OULDYQ2TA3HOXH54PC3DCBFZS/
lists.fedoraproject.org/archives/list/[email protected]/message/JIUCZN3PEKUCT2JQYQTYOVIJG2KSD6G7/
lists.fedoraproject.org/archives/list/[email protected]/message/JMGP65NANDVKPDMXMKYO2ZV2H2HZJY4P/
lists.fedoraproject.org/archives/list/[email protected]/message/UEAAAI4OULDYQ2TA3HOXH54PC3DCBFZS/
security-tracker.debian.org/tracker/CVE-2022-39209
Related
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
0.001 Low
EPSS
Percentile
48.4%