Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:43294
HistorySep 18, 2023 - 3:21 a.m.

Denial Of Service (DoS)

2023-09-1803:21:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
hwloc
denial of service
vulnerability
glibc
cpuset allocation

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

9.0%

hwloc is vulnerable to Denial of Service. The vulnerability is due to improper handling of glibc cpuset allocation topology-linux.c, which can result in an application crash.

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

9.0%