by Kastro
Paper/Archive/CVE-2023-45929

CVE-2023-45929

s-lang s-lang — S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixup_tgetstr().

EPSS 0.7%CVSS 9.1
critical.is priorityof 100
38
CVSS 9.1 (ADP)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 53.5.535 × 2010.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixup_tgetstr().

Affected

ProductAffectedFixed inSource
n/an/a–CNA
s-lang2.3.2–CISA-ADP

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

reflists.jedsoft.org/lists/slang-users/2023/0000002.htmlrefseclists.org/fulldisclosure/2024/Jan/57