PT-2023-18536 · Cmark-Gfm+1 · Cmark-Gfm+1

Kevinbackhouse · Published 2023-01-24 · Updated 2023-10-06 · CVE-2023-22485

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions cmark-gfm versions prior to 0.29.0.gfm.7

Description The issue is related to a crafted markdown document that can trigger an out-of-bounds read in the validate protocol function. This bug is believed to be harmless in practice because the out-of-bounds read accesses malloc metadata without causing any visible damage. Additionally, there are issues with polynomial time complexity in multiple components, which may lead to unbounded resource exhaustion and denial of service.

Recommendations For versions prior to 0.29.0.gfm.7, upgrade to version 0.29.0.gfm.7 or later to patch the vulnerability. As a temporary workaround, consider validating input from trusted sources to minimize the risk of exploitation. Restrict access to untrusted markdown documents until the issue is resolved.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-91

CWE-125

Related Identifiers

CVE-2023-22485

GHSA-C944-CV5F-HPVR

RSEC-2023-8

Affected Products

Debian

Cmark-Gfm

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/22xxx/CVE-2023-22485.json · Exploit
• 🔥 https://github.com/github/cmark-gfm/security/advisories/GHSA-c944-cv5f-hpvr · Exploit
• https://ubuntu.com/security/CVE-2023-22485 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-22485 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-22484 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-22485 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-24824 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-22485 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-22486 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-22485 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-22483 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-26485 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-22485 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-22485 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-37463 · Vendor Advisory