CVE-2024-22051

CommonMarker versions prior to 0.23.4 are at risk of an integer overflow vulnerability. This vulnerability can result in possibly unauthenticated remote attackers to cause heap memory corruption, potentially leading to an information leak or remote code execution, via parsing tables with marker rows that contain more than UINT16_MAX columns.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/advisories/GHSA-fmx4-26r3-wxpf	Third Party Advisory
https://github.com/github/cmark-gfm/security/advisories/GHSA-mc3g-88wq-6f4x	Not Applicable
https://github.com/gjtorikian/commonmarker/commit/ab4504fd17460627a6ab255bc3c63e8e5fc6aed3	Patch
https://github.com/gjtorikian/commonmarker/security/advisories/GHSA-fmx4-26r3-wxpf	Vendor Advisory
https://vulncheck.com/advisories/vc-advisory-GHSA-fmx4-26r3-wxpf	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:github:cmark-gfm::::::::
	cpe:2.3:a:github:cmark-gfm::::::::
	cpe:2.3:a:gjtorikian:commonmarker::::::ruby::*

History

No history.

Information

Published : 2024-01-04 21:15

Updated : 2024-01-11 17:07

NVD link : CVE-2024-22051

Mitre link : CVE-2024-22051

CVE.ORG link : CVE-2024-22051

JSON object : View

Products Affected

gjtorikian

commonmarker

github

cmark-gfm

CWE

CWE-190

Integer Overflow or Wraparound

{"id": "CVE-2024-22051", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2024-01-04T21:15:10.173", "references": [{"url": "https://github.com/advisories/GHSA-fmx4-26r3-wxpf", "tags": ["Third Party Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/github/cmark-gfm/security/advisories/GHSA-mc3g-88wq-6f4x", "tags": ["Not Applicable"], "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/gjtorikian/commonmarker/commit/ab4504fd17460627a6ab255bc3c63e8e5fc6aed3", "tags": ["Patch"], "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/gjtorikian/commonmarker/security/advisories/GHSA-fmx4-26r3-wxpf", "tags": ["Vendor Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://vulncheck.com/advisories/vc-advisory-GHSA-fmx4-26r3-wxpf", "tags": ["Third Party Advisory"], "source": "disclosure@vulncheck.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-190"}]}, {"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-190"}]}], "descriptions": [{"lang": "en", "value": "CommonMarker versions prior to 0.23.4 are at risk of an integer overflow vulnerability. This vulnerability can result in possibly unauthenticated remote attackers to cause heap memory corruption, potentially leading to an information leak or remote code execution, via parsing tables with marker rows that contain more than UINT16_MAX columns.\n\n"}, {"lang": "es", "value": "Las versiones de CommonMarker anteriores a la 0.23.4 corren el riesgo de sufrir una vulnerabilidad de desbordamiento de enteros. Esta vulnerabilidad puede provocar que atacantes remotos posiblemente no autenticados provoquen da\u00f1os en la memoria del mont\u00f3n, lo que podr\u00eda provocar una fuga de informaci\u00f3n o la ejecuci\u00f3n remota de c\u00f3digo, a trav\u00e9s de tablas de an\u00e1lisis con filas de marcadores que contienen m\u00e1s de columnas UINT16_MAX."}], "lastModified": "2024-01-11T17:07:05.660", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:github:cmark-gfm:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EE338A98-B4AC-4761-B15C-8E94487F3BD7", "versionEndExcluding": "0.28.3.gfm.21"}, {"criteria": "cpe:2.3:a:github:cmark-gfm:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF1563A6-80D2-444D-A498-20E253181077", "versionEndExcluding": "0.29.0.gfm.3", "versionStartIncluding": "0.29.0.gfm.0"}, {"criteria": "cpe:2.3:a:gjtorikian:commonmarker:*:*:*:*:*:ruby:*:*", "vulnerable": true, "matchCriteriaId": "5F5F9E76-CBF8-4C5B-AECB-C15FC797B04A", "versionEndExcluding": "0.23.4"}], "operator": "OR"}]}], "sourceIdentifier": "disclosure@vulncheck.com"}