USN-7319-1: cmark-gfm vulnerabilities
It was discovered that cmark-gfm's autolink extension did not correctly handle parsing large inputs. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-39209) It was discovered that cmark-gfm did not correctly handle parsing large inputs. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 24.10. (CVE-2023-22483) It was discovered that cmark-gfm did not correctly handle parsing large inputs. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 24.10. (CVE-2023-22484) It was discovered that cmark-gfm did not correctly handle parsing large inputs. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-22486, CVE-2023-26485)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-7319-1?
The severity of USN-7319-1 is rated to potentially allow a denial of service due to improper input handling.
How do I fix USN-7319-1?
To fix USN-7319-1, update the cmark-gfm package to the remedial versions specified for your Ubuntu release.
Which Ubuntu versions are affected by USN-7319-1?
USN-7319-1 affects Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS.
What is the cause of the vulnerability in USN-7319-1?
The vulnerability in USN-7319-1 is caused by cmark-gfm's autolink extension failing to handle large input parsing correctly.
Can an attacker exploit USN-7319-1 remotely?
Yes, an attacker could potentially exploit USN-7319-1 remotely to cause denial of service.