CVE-2023-37463CWE-400

Quadratic complexity bugs may lead to a denial of service

Medium · published July 13, 2023

CVSS v3.1
6.4
EPSS
1%
Percentile
52.4
In the wild
Unconfirmed
What it is

cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version of Markdown syntax with a spec. Three polynomial time complexity issues in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. These vulnerabilities have been patched in 0.29.0.gfm.12.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00696 · 52.4th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2023-07-13T19:22Z
EPSS history
Timeline
  • 13 JUL 19:22Z
    Quadratic complexity bugs may lead to a denial of service
    cvelistv5