CVE-2023-29939

llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::spirv::TargetEnv::TargetEnv(mlir::spirv::TargetEnvAttr).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
mitreCNA
---
---
CVEADP
---
---
CISA-ADPADP
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 3%
Debian logo
Debian Releases
Debian Product
Codename
llvm-toolchain-13
bullseye
unimportant
bookworm
unimportant
llvm-toolchain-14
bookworm
unimportant
sid
1:14.0.6-20
fixed
llvm-toolchain-15
bookworm
unimportant
trixie
1:15.0.7-15
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
llvm-toolchain-13
lunar
Fixed 1:13.0.1-11ubuntu14.1
released
kinetic
ignored
jammy
Fixed 1:13.0.1-2ubuntu2.2
released
focal
dne
bionic
dne
xenial
ignored
trusty
ignored
llvm-toolchain-14
lunar
Fixed 1:14.0.6-12ubuntu0.23.04.1
released
kinetic
ignored
jammy
Fixed 1:14.0.0-1ubuntu1.1
released
focal
dne
bionic
dne
xenial
ignored
trusty
ignored
llvm-toolchain-15
lunar
Fixed 1:15.0.7-3ubuntu0.23.04.1
released
kinetic
ignored
jammy
Fixed 1:15.0.7-0ubuntu0.22.04.3
released
focal
dne
bionic
dne
xenial
ignored
trusty
ignored
Common Weakness Enumeration
References
https://github.com/llvm/llvm-project/issues/59983
https://github.com/llvm/llvm-project/issues/59983
https://github.com/llvm/llvm-project/issues/59983