Denial Of Service (DOS)

2024-04-1005:32:14

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

denial of service

libslang.so

vulnerability

application crash

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

libslang.so is vulnerable to Denial of Service. The vulnerability is due to an uncaught exception caused by parsing a corrupted terminfo file, which results in an application crash.

CPENameOperatorVersion
libslang.sole2.3.3
libslang.sole2.3.3

CPE	Name	Operator	Version
	libslang.so	le	2.3.3
	libslang.so	le	2.3.3

References

lists.jedsoft.org/lists/slang-users/2023/0000003.html

seclists.org/fulldisclosure/2024/Jan/55