CVE-2020-5238
01.07.2020, 23:15
The table extension in GitHub Flavored Markdown before version 0.29.0.gfm.1 takes O(n * n) time to parse certain inputs. An attacker could craft a markdown table which would take an unreasonably long time to process, causing a denial of service. This issue does not affect the upstream cmark project. The issue has been fixed in version 0.29.0.gfm.1.Enginsight
| Vendor | Product | Version |
|---|---|---|
| github_flavored_markdown_project | github_flavored_markdown | 𝑥 < 0.29.0.gfm.1 |
𝑥
= Vulnerable software versions
Debian Releases
Debian Product | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| cmark-gfm |
| ||||||||||
| haskell-cmark-gfm |
| ||||||||||
| python-cmarkgfm |
| ||||||||||
| r-cran-commonmark |
| ||||||||||
| ruby-commonmarker |
|
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| cmark-gfm |
| ||||||||||||||||||||||||
| haskell-cmark-gfm |
| ||||||||||||||||||||||||
| python-cmarkgfm |
| ||||||||||||||||||||||||
| r-cran-commonmark |
| ||||||||||||||||||||||||
| ruby-commonmarker |
|
Common Weakness Enumeration
References