References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Change History

http://seclists.org/fulldisclosure/2024/Jan/63

https://github.com/MiniZinc/libminizinc/commit/afe67acc20898e4308044b54c4acf7a08df544f0

https://github.com/MiniZinc/libminizinc/issues/730

https://www.minizinc.org/doc-2.8.3/en/changelog.html

CISA-ADP AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA-ADP CWE-476

MITRE disputed

An issue in MiniZinc before 2.8.0 allows a NULL pointer dereference via ti_expr in a crafted .mzn file. NOTE: this is disputed because there is no common libminizinc use case in which an unattended process is supposed to run forever to process a series of atttacker-controlled .mzn files.

MITRE http://seclists.org/fulldisclosure/2024/Jan/63 [No types assigned]

MITRE https://github.com/MiniZinc/libminizinc/commit/afe67acc20898e4308044b54c4acf7a08df544f0 [No types assigned]

MITRE https://github.com/MiniZinc/libminizinc/issues/730 [No types assigned]

MITRE https://www.minizinc.org/doc-2.8.3/en/changelog.html [No types assigned]