Impact
An issue in the with_argv function of the relibc library allows an attacker to cause a denial of service by supplying specially crafted arguments. The vulnerability arises because the function performs insufficient input validation and permits resource exhaustion, as identified by CWE-400 Resource Exhaustion weaknesses. When an application passes malformed arguments to with_argv, the function can either crash or consume excessive resources, leading to a loss of availability for the affected process.
Affected Systems
The flaw is present in the relibc component of the Redox operating system, specifically in commit 61f42d. Vendor or product identifiers were not supplied in the CVE payload, so no specific vendor or distribution is named; any instance of Redox or other operating systems that include the affected commit without the subsequent fix may be vulnerable.
Risk and Exploitability
The CVSS score is 7.5, indicating high severity, while the EPSS score is not available and the vulnerability is not listed in CISA's KEV catalog. Based on the description, it is inferred that the attack vector requires an attacker to supply crafted command‑line arguments to a program that uses relibc’s with_argv. No publicly known exploits are documented, and the lack of an EPSS score suggests a lower likelihood of exploitation. However, if an attacker can supply the input, the impact remains a critical loss of availability.
OpenCVE Enrichment