Lucene search

Veracode Vulnerability DatabaseVERACODE:44113

HistoryNov 02, 2023 - 4:55 p.m.

Denial Of Service (DoS)

2023-11-0216:55:18

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

denial of service

cwriter::mangletype

software vulnerability

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.0%

JSON

wabt is vulnerable to Denial of Service (DoS). The vulnerability occurs within the CWriter::MangleType function, resulting in a DoS.

CPENameOperatorVersion
wabt:sideq1.0.20-1
wabt:sideq1.0.20-1

CPE	Name	Operator	Version
	wabt:sid	eq	1.0.20-1
	wabt:sid	eq	1.0.20-1

References

github.com/WebAssembly/wabt/issues/1984

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OSFFCKXUQ5PAC5UVXY7N6HEHVQ3AC2RG/

lists.fedoraproject.org/archives/list/[email protected]/message/OSFFCKXUQ5PAC5UVXY7N6HEHVQ3AC2RG/

security-tracker.debian.org/tracker/CVE-2023-27116

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.0%

JSON

Related for VERACODE:44113