[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fy8h2jOfXVE3UXgeIuHrqsC9xToQw05FrQY-qGhhc_Bo":3,"g5a-risk:CVE-2023-29407":139},{"success":4,"data":5,"meta":136},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":31,"epssPercentile":28,"epssTimeSeries":32,"severity":33,"affectedProducts":34,"affectedProductsCount":48,"references":49,"referencesCount":79,"weaknesses":80,"weaknessesCount":89,"isActivelyExploited":90,"cisaInfo":28,"otxData":28,"relatedBlogPosts":91,"seoMetadata":92,"configurations":117,"relatedVendorCves":134,"notableEvents":135},"CVE-2023-29407","What is CVE-2023-29407?","A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size (width * height) appearing to be zero.","A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU ...","2023-08-02T20:15:11.76","2023-11-07T04:11:11.257",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":28,"CVSSMetricV2":28,"CVSSMetricV40":28},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":26,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH","MEDIUM",null,2.8,3.6,0.00874,[31,31,31,31,31,31,31],"Medium",[35,40,45],{"vendor":36,"product":37,"version":38,"criteria":39,"vulnerable":4},"golang","image","*","cpe:2.3:a:golang:image:*:*:*:*:*:go:*:*",{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"fedoraproject","fedora","37","cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",{"vendor":41,"product":42,"version":46,"criteria":47,"vulnerable":4},"38","cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",3,[50,55,60,66,69,72,75],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fgo.dev\u002Fcl\u002F514897","Go",[54],"Patch",{"url":56,"source":52,"tags":57},"https:\u002F\u002Fgo.dev\u002Fissue\u002F61581",[58,59],"Issue Tracking","Vendor Advisory",{"url":61,"source":62,"tags":63},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FKO54NBDUJXKAZNGCFOEYL2LKK2RQP6K6\u002F","Fedoraproject",[64,65],"Mailing List","Third Party Advisory",{"url":67,"source":62,"tags":68},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FXWH6Q7NVM4MV3GWFEU4PA67AWZHVFJQ2\u002F",[64,65],{"url":70,"source":62,"tags":71},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FXZTEP6JYILRBNDTNWTEQ5D4QUUVQBESK\u002F",[],{"url":73,"source":52,"tags":74},"https:\u002F\u002Fpkg.go.dev\u002Fvuln\u002FGO-2023-1990",[58,54,59],{"url":76,"source":77,"tags":78},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20230831-0009\u002F","Netapp",[65],7,[81],{"id":82,"name":83,"description":84,"extendedDescription":85,"status":86,"abstraction":87,"structure":88},"CWE-834","Excessive Iteration","The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.","If the iteration can be influenced by an attacker, this weakness could allow attackers to consume excessive resources such as CPU or memory. In many cases, a loop does not need to be infinite in order to cause enough resource consumption to adversely affect the product or its host system; it depends on the amount of resources consumed per iteration.","Incomplete","Class","Simple",1,false,[],{"title":93,"metaDescription":94,"keywords":95,"canonicalUrl":96,"structuredData":97},"What is CVE-2023-29407? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-29407, a medium severity cyber security vulnerability from 2023. A maliciously-crafted image can cause excessive CPU consu...","CVE-2023-29407, CVE-2023-29407 vulnerability, CVE-2023-29407 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, golang security, fedoraproject security, image vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2023-29407",{"@context":98,"@type":99,"headline":93,"description":94,"datePublished":10,"dateModified":11,"author":100,"publisher":104,"about":108,"mainEntityOfPage":112,"articleSection":115,"keywords":116},"https:\u002F\u002Fschema.org","TechArticle",{"@type":101,"name":102,"url":103},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":101,"name":102,"url":103,"logo":105},{"@type":106,"url":107},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":109,"name":6,"description":110,"additionalType":111},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":113,"@id":114},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-29407","Cybersecurity","CVE-2023-29407, CVE-2023-29407 vulnerability, CVE-2023-29407 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[118,126],{"Operator":28,"Negate":28,"Nodes":119},[120],{"Operator":121,"Negate":28,"CPEMatch":122},"OR",[123],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":124,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":125,"VersionEndIncluding":28},"32C71B1D-8466-4F3A-8477-D31FDB285296","0.10.0",{"Operator":28,"Negate":28,"Nodes":127},[128],{"Operator":121,"Negate":28,"CPEMatch":129},[130,132],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":131,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"E30D0E6F-4AE8-4284-8716-991DFA48CC5D",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":133,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"CC559B26-5DFC-4B7A-A27C-B77DE755DFF9",[],[],{"lastModified":11,"cacheTime":137,"version":138},1792338933303,"2.0",{"score":140,"band":141,"action":142,"scoredAt":143},24,"Low","Monitor","2026-10-16T06:58:43.14563+00:00"]