9.1

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2023-45927

CVE-2023-45927: S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf().

S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf().

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2023-45927

CVE-2023-45927:

9.1

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The analysis is based on the vulnerability description and the content of the provided reference URLs, specifically the S-Lang users mailing list archive. The vulnerability is described as an arithmetic exception occurring in the function tt_sprintf. A stack trace available at http://lists.jedsoft.org/lists/slang-users/2023/0000003.html confirms this, showing tt_sprintf at the top of the call stack when the SIGFPE signal is received. The file path src/sldisply.c is also derived from this stack trace. No commit patches were available for analysis, so the identification of the vulnerable function relies solely on the textual descriptions and the runtime crash information. tt_sprintf is identified as the vulnerable function because it is the direct site of the arithmetic error. Other functions in the call stack (tt_printf, write_attributes, etc.) are part of the execution path leading to the vulnerability but the flaw itself manifests within tt_sprintf.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.