Medium WID-SEC-2025-1213 1 CVE

Red Hat Enterprise Linux (cmark-gfm): Schwachstelle ermöglicht Denial of Service

Published Jun 2, 2025 · Updated Jun 2, 2025 · de-DE

Vendor: Red Hat Product: Enterprise Linux Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Vulnerabilities 1

Medium 5.3

CVE-2023-24824

Quadratic complexity may lead to a denial of service in cmark-gfm

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time complexity issue in cmark-gfm may lead to unbounded resource exhaustion and subsequent denial of service. This CVE covers quadratic complexity …

GitHub cmark-gfm ruby-commonmarker r-cran-commonmark Debian Ubuntu Hackage

Mar 31, 2023

Revision history

2025-06-02 #1
Initiale Fassung

References

RedHat Security Advisory vom 2025-06-02
https://access.redhat.com/errata/RHSA-2025:8427