CVE-2023-51890

Опубликовано: 24 янв. 2024

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via crafted string in the application URL.

Ссылки

https://blog.yulun.ac.cn/posts/2023/fuzzing-mathtex/
Exploit
Third Party Advisory
https://blog.yulun.ac.cn/posts/2023/fuzzing-mathtex/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ctan:mathtex:*:*:*:*:*:*:*:*

Версия до 1.05 (включая)

EPSS

Процентиль: 63%

0.00445

Низкий

7.5 High

CVSS3

Дефекты

CWE-835

Связанные уязвимости

CVE-2023-51890

CVSS3: 7.5

ubuntu

около 2 лет назад

An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via crafted string in the application URL.

CVE-2023-51890

CVSS3: 7.5

debian

около 2 лет назад

An infinite loop issue discovered in Mathtex 1.05 and before allows a ...

GHSA-567x-h4g5-2gwq

CVSS3: 7.5

github

около 2 лет назад

An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via crafted string in the application URL.

EPSS

Процентиль: 63%

0.00445

Низкий

7.5 High

CVSS3

Дефекты

CWE-835