Segmentation Fault

2024-04-1005:28:40

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

segmentation fault

denial of service

libslang.so

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

libslang.so is vulnerable to a segmentation fault. The vulnerability is due to improper handling of a corrupted terminfo file within the fixup_tgetstr function, which results in Denial of Service.

CPENameOperatorVersion
libslang.sole2.3.2
libslang.sole2.3.2

CPE	Name	Operator	Version
	libslang.so	le	2.3.2
	libslang.so	le	2.3.2

References

lists.jedsoft.org/lists/slang-users/2023/0000002.html

seclists.org/fulldisclosure/2024/Jan/57