CVE-2023-46046

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-46046
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-46046.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-46046
Published
2024-03-27T05:15:47Z
Modified
2025-07-03T02:10:05.046990Z
Summary
[none]
Details

An issue in MiniZinc before 2.8.0 allows a NULL pointer dereference via ti_expr in a crafted .mzn file. NOTE: this is disputed because there is no common libminizinc use case in which an unattended process is supposed to run forever to process a series of atttacker-controlled .mzn files.

References

Affected packages

Debian:11 / minizinc

Package

Name
minizinc
Purl
pkg:deb/debian/minizinc?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.5.3+dfsg1-1
2.6.3+dfsg1-1
2.6.4+dfsg1-1
2.8.2+dfsg1-1
2.8.3+dfsg1-1
2.8.5+dfsg1-1
2.8.5+dfsg1-2
2.8.6+dfsg1-1
2.8.7+dfsg1-1
2.9.0+dfsg1-1
2.9.2+dfsg1-1

Ecosystem specific 

{
    "urgency": "unimportant"
}

Debian:12 / minizinc

Package

Name
minizinc
Purl
pkg:deb/debian/minizinc?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.6.4+dfsg1-1
2.8.2+dfsg1-1
2.8.3+dfsg1-1
2.8.5+dfsg1-1
2.8.5+dfsg1-2
2.8.6+dfsg1-1
2.8.7+dfsg1-1
2.9.0+dfsg1-1
2.9.2+dfsg1-1

Ecosystem specific 

{
    "urgency": "unimportant"
}

Debian:13 / minizinc

Package

Name
minizinc
Purl
pkg:deb/debian/minizinc?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.8.2+dfsg1-1

Affected versions

2.*

2.6.4+dfsg1-1

Ecosystem specific 

{
    "urgency": "unimportant"
}

Git / github.com/minizinc/libminizinc

Affected ranges

Type
GIT
Repo
https://github.com/minizinc/libminizinc
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
afe67acc20898e4308044b54c4acf7a08df544f0

Affected versions

2.*

2.0.0
2.0.1
2.0.10
2.0.11
2.0.12
2.0.13
2.0.14
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.97
2.0.98
2.0.b1
2.0.b2
2.0.b3
2.0.b4
2.1.0
2.1.0b2
2.1.0b3
2.1.1
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.2.0
2.2.1
2.2.2
2.2.3
2.3.0
2.3.1
2.3.2
2.4.0
2.4.1
2.4.2
2.4.3
2.5.0
2.5.1
2.5.2
2.5.3
2.5.4
2.5.5
2.6.0
2.6.1
2.6.2
2.6.3
2.6.4
2.7.0
2.7.1
2.7.2
2.7.3
2.7.4
2.7.5
2.7.6