Lucene search
Veracode Vulnerability DatabaseVERACODE:39030HistoryJan 27, 2023 - 5:16 a.m.
Denial Of Service (DoS)
2023-01-2705:16:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
denial of service vulnerability application crash polynomial time complexity issue
0.001 Low
EPSS
Percentile
31.2%
libcmark-gfm.so is vulnerable to Denial of Service (DoS) attacks. A malicious user is able to pass various commands with very large values through the handle_pointy_brace function causing the running time to increase quadratically due to polynomial time complexity issues, resulting in an application crash.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libcmark-gfm.so | le | 0.29.0.gfm.0 | |
| libcmark-gfm.so | le | 0.29.0.gfm.0 |
Related
cve
cve
CVE-2023-22484
2023-01-23 23:15:10
debiancve
debiancve
CVE-2023-22484
2023-01-23 23:15:10
ubuntucve
ubuntucve
CVE-2023-22484
2023-01-23 00:00:00
nvd
nvd
CVE-2023-22484
2023-01-23 23:15:10
osv
osv
CVE-2023-22484
2023-01-23 23:15:10
Denial of Service (DoS) vulnerabilities
2023-10-06 05:00:00
prion
prion
Denial of service
2023-01-23 23:15:00
cvelist
cvelist
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0181)
2023-05-22 00:00:00
mageia
mageia
Updated cmark packages fix security vulnerability
2023-05-21 11:42:44
github
github