Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2023-45927
CVE-2023-45927:
Homebrew vulnerability analysis and mitigation
Overview
S-Lang version 2.3.2 contains a vulnerability identified as CVE-2023-45927, which manifests as an arithmetic exception in the tt_sprintf() function. The vulnerability was discovered in July 2023 and publicly disclosed in January 2024 (Slang Users List, Full Disclosure).
Technical details
The vulnerability occurs in the tt_sprintf() function within S-Lang's display handling code. The issue was initially discovered while running the Midnight Commander (mc) application on Ubuntu 22.04, where it triggered a SIGFPE (Floating Point Exception) signal. The bug manifests specifically in the display handling code at src/sldisply.c:644 (Slang Users List).
Impact
When triggered, the vulnerability results in an arithmetic exception that can cause the application to crash, potentially disrupting the normal operation of programs that utilize the S-Lang library (Slang Users List).
Additional resources
Source: This report was generated using AI
Related Homebrew vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management