Cloudanix VulnDB

CVE-2024-37794

High · 7.5

CVSS

7.5

EPSS

0.5%

Published

Jun 17, 2024

CISA due date

—

Cloudanix analysis

Monitor only SSVC: Track

A flaw in the CVC5 solver lets attackers crash it by feeding it a specially made input file, which can interrupt computational tasks that depend on the tool.

Exploitation
Remote Unauthenticated
Attacker needs
None
Complexity
Low
Impact
Denial Of Service
Component
Application
Class
Improper Input Validation
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

Improper input validation in CVC5 Solver v1.1.3 allows remote attackers to supply a crafted SMT2 input file that triggers a denial of service by crashing the solver process.

Why it matters to the business

Service disruptions and downtime for any automated reasoning, verification, or solver-dependent workflows; low urgency given stable low EPSS, no KEV listing, and over two years since publication, but still relevant for organizations running the listed Linux distributions.

How an attack unfolds

An attacker prepares a malicious SMT2 file that exploits the input validation weakness and delivers it to a CVC5 instance, causing the solver to crash without authentication or user interaction.

How to fix it

Upgrade to the fixed versions for each affected product: linux (Debian:12) and linux (Debian:13) to 5.15.15-1; linux (Ubuntu:20.04:LTS) and related packages (linux-aws, linux-azure, linux-gcp, linux-gkeop and their -5.15 variants) to the corresponding 5.4.0 or 5.15.0 kernel builds listed in the fixed_versions data.

How to confirm the fix worked

Confirm the installed package versions match or exceed the listed fixed versions for each distribution and kernel variant; test solver behavior with known-good SMT2 inputs after upgrade.

Typical attack path

  1. Locate an exposed or reachable CVC5 Solver accepting SMT2 inputs
  2. Craft a specially formed SMT2 file that bypasses input validation
  3. Submit the file to the solver to induce a crash

How to detect it

Look in application and system logs for unexpected CVC5 process terminations immediately after SMT2 file ingestion; correlate with file upload or processing events from untrusted sources.

What your security team should do

  • Apply the listed fixed package versions on all affected Debian and Ubuntu systems
  • Restrict untrusted SMT2 file processing until patches are deployed
  • Review solver deployment exposure and implement input sanitization where feasible

The record

Improper input validation in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service (DoS) via a crafted SMT2 input file.

Affected packages

Ecosystem Package Introduced Fixed
Debian:12 cvc5 0 No fix
Debian:13 cvc5 0 No fix
Ubuntu:24.04:LTS cvc5 0 No fix
Ubuntu:24.10 cvc5 0 No fix
Ubuntu:25.04 cvc5 0 No fix
Ubuntu:25.10 cvc5 0 No fix

Related vulnerabilities