CVE-2023-35790

Опубликовано: 16 июн. 2023

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop.

Ссылки

https://github.com/libjxl/libjxl/pull/2551
Patch
https://github.com/libjxl/libjxl/releases/tag/v0.8.2
Release Notes
https://github.com/libjxl/libjxl/pull/2551
Patch
https://github.com/libjxl/libjxl/releases/tag/v0.8.2
Release Notes

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libjxl_project:libjxl:*:*:*:*:*:*:*:*

Версия до 0.8.2 (исключая)

EPSS

Процентиль: 25%

0.00081

Низкий

7.5 High

CVSS3

Дефекты

CWE-191

Связанные уязвимости

CVE-2023-35790

CVSS3: 7.5

ubuntu

около 2 лет назад

An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop.

CVE-2023-35790

CVSS3: 7.5

redhat

около 2 лет назад

An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an infinite loop.

CVE-2023-35790

CVSS3: 7.5

debian

около 2 лет назад

An issue was discovered in dec_patch_dictionary.cc in libjxl before 0. ...

openSUSE-SU-2023:0161-1

suse-cvrf

почти 2 года назад

Security update for libjxl

ROS-20230627-02

CVSS3: 7.5

redos

почти 2 года назад

Уязвимость libjxl

EPSS

Процентиль: 25%

0.00081

Низкий

7.5 High

CVSS3

Дефекты

CWE-191