PT-2022-1777 · Cmark-Gfm+4 · Cmark-Gfm+4

Felix Wilhelm · Published 2022-03-03 · Updated 2023-10-06 · CVE-2022-24724

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions cmark-gfm versions prior to 0.29.0.gfm.3 and 0.28.3.gfm.21

Description The issue is related to an integer overflow in cmark-gfm's table row parsing, which may lead to heap memory corruption when parsing tables with more than UINT16 MAX columns. This can result in Information Leak or Arbitrary Code Execution, depending on how and where cmark-gfm is used. If cmark-gfm is used for rendering remote user-controlled markdown, this may lead to Remote Code Execution (RCE) in applications employing affected versions of the cmark-gfm library.

Recommendations To resolve the issue, update to version 0.29.0.gfm.3 or 0.28.3.gfm.21, or later. As a temporary workaround, consider disabling the table extension in cmark-gfm to prevent this vulnerability from being triggered.

Exploit

Fix

RCE

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALSA-2022:5597

ALSA-2022_5597

BDU:2022-01140

CESA-2022_5597

CVE-2022-24724

GHSA-FMX4-26R3-WXPF

GHSA-MC3G-88WQ-6F4X

RHSA-2022:5597

RHSA-2022_5597

RSEC-2023-7

Affected Products

Almalinux

Centos

Debian

Red Hat

Cmark-Gfm

References · 33

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24724.json · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/commonmarker/CVE-2024-22051.yml · Exploit
• 🔥 http://packetstormsecurity.com/files/166599/cmark-gfm-Integer-overflow.html · Exploit
• https://security-tracker.debian.org/tracker/CVE-2022-24724 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-01140 · Security Note
• https://osv.dev/vulnerability/ALSA-2022:5597 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5CYUU662VO6CCXQKVZVOHXX3RGIF2DLQ · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KH4UQA6VWVZU5EW3HNEAB7D7BTCNJSJ2 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-24724 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RSKUOJ2VAYGTJXPDE2RRPMNLVVMKCI77 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-24724 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7V3HAM5H6YFJG2QFEXACZR3XVWFTXTC · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-22051 · Security Note
• https://errata.almalinux.org/8/ALSA-2022-5597.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-24724 · Vendor Advisory