CVE-2023-46361 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.5 MEDIUM	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 50%

Affected Products (NVD)

Vendor	Product	Version
artifex	jbig2dec	0.20

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

jbig2dec

bookworm	unimportant
bullseye	unimportant
sid	unimportant
trixie	unimportant

Ubuntu Releases

Ubuntu Product

Codename

jbig2dec

bionic	not-affected
focal	not-affected
jammy	needed
lunar	ignored
mantic	ignored
noble	needed
oracular	needed
trusty	not-affected
xenial	not-affected

Amazon Linux Releases

Amazon Package

Release

jbig2dec

Amazon Linux 2023

0:0.19-4.amzn2023.0.2

fixed

jbig2dec-debuginfo

Amazon Linux 2023

0:0.19-4.amzn2023.0.2

fixed

jbig2dec-debugsource

Amazon Linux 2023

0:0.19-4.amzn2023.0.2

fixed

jbig2dec-devel

Amazon Linux 2023

0:0.19-4.amzn2023.0.2

fixed

jbig2dec-libs

Amazon Linux 2023

0:0.19-4.amzn2023.0.2

fixed

jbig2dec-libs-debuginfo

Amazon Linux 2023

0:0.19-4.amzn2023.0.2

fixed

Known Exploits!

Common Weakness Enumeration

CWE-400 - Uncontrolled Resource Consumption
The software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References

https://github.com/Frank-Z7/z-vulnerabilitys/blob/main/jbig2dec-SEGV/jbig2dec-SEGV.md