CVE-2023-46046
An issue in MiniZinc before 2.8.0 allows a NULL pointer dereference via ti_expr in a crafted .mzn file. NOTE: this is disputed because there is no com...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue in MiniZinc before 2.8.0 allows a NULL pointer dereference via ti_expr in a crafted .mzn file. NOTE: this is disputed because there is no common libminizinc use case in which an unattended process is supposed to run forever to process a series of atttacker-controlled .mzn files.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2023-46046 minizinc
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- report github.com
- web packetstormsecurity.com
- web minizinc.org
- web seclists.org