Summary
It was discovered that LLVM Toolchain did not properly manage memory under
certain circumstances. If a user were tricked into opening a specially
crafted MLIR file, an attacker could possibly use this issue to cause LLVM
Toolchain to crash, resulting in a denial of service. (CVE-2023-29932,
CVE-2023-29934, CVE-2023-29939)
It was discovered that LLVM Toolchain did not properly manage memory under
certain circumstances. If a user were tricked into opening a specially
crafted MLIR file, an attacker could possibly use this issue to cause LLVM
Toolchain to crash, resulting in a denial of service. This issue only
affected llvm-toolchain-15. (CVE-2023-29933)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | llvm-toolchain-13 | 1:13.0.1-2ubuntu2.2 |
| Ubuntu · 22.04 LTS 22.04:LTS | llvm-toolchain-14 | 1:14.0.0-1ubuntu1.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | llvm-toolchain-15 | 1:15.0.7-0ubuntu0.22.04.3 |
Vulnerabilities 4
-
Medium 5.5
llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperand<mlir::OpO…
-
Medium 5.5
llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::getArgument.
-
Medium 5.5
llvm-project commit 6c01b5c was discovered to contain a segmentation fault via the component mlir::Type::getDialect().
-
Medium 5.5
llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::spirv::TargetEnv::T…