1. Home
  2. CVE Database
  3. CVE-2023-37463
MEDIUM · 6.4

CVE-2023-37463

cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version of Markdown syntax with a spec. Three polynomial time complexity issues in cmark-gfm may lead t...

Vulnerability Description

cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version of Markdown syntax with a spec. Three polynomial time complexity issues in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. These vulnerabilities have been patched in 0.29.0.gfm.12.

CVSS Score

6.4

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
HIGH

Affected Products

VendorProductVersions
GithubCmark-Gfm< 0.29.0.gfm.12

Related Weaknesses (CWE)

CWE-400

References

FAQ

What is CVE-2023-37463?

CVE-2023-37463 is a vulnerability with a CVSS score of 6.4 (MEDIUM). cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version of Markdown syntax with a spec. Three polynomial time complexity issues in cmark-gfm may lead t...

How severe is CVE-2023-37463?

CVE-2023-37463 has been rated MEDIUM with a CVSS base score of 6.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-37463?

Check the references section above for vendor advisories and patch information. Affected products include: Github Cmark-Gfm.