Vulnerability · Published Apr 21, 2021 · Assigned by mitre
CVE-2020-23914
Medium 5.5
In plain English
A medium-severity security flaw in the retroarch package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities).
Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.9%top 41.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An issue was discovered in cpp-peglib through v0.1.12. A NULL pointer dereference exists in the peg::AstOptimizer::optimize() located in peglib.h. It allows an attacker to cause Denial of Service.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | retroarch | no fix listed | DEBIAN-CVE-2020-23914 |
| Debian:13 | retroarch | no fix listed | DEBIAN-CVE-2020-23914 |
| Debian:14 | retroarch | no fix listed | DEBIAN-CVE-2020-23914 |
| Ubuntu:25.10 | retroarch | no fix listed | UBUNTU-CVE-2020-23914 |
| Ubuntu:26.04:LTS | retroarch | no fix listed | UBUNTU-CVE-2020-23914 |
| Ubuntu:26.10 | retroarch | no fix listed | UBUNTU-CVE-2020-23914 |
| Ubuntu:22.04:LTS | salmon | no fix listed | UBUNTU-CVE-2020-23914 |
| Ubuntu:24.04:LTS | salmon | no fix listed | UBUNTU-CVE-2020-23914 |
| Ubuntu:25.10 | salmon | no fix listed | UBUNTU-CVE-2020-23914 |
| Ubuntu:26.04:LTS | salmon | no fix listed | UBUNTU-CVE-2020-23914 |
| Ubuntu:26.10 | salmon | no fix listed | UBUNTU-CVE-2020-23914 |
Affected products (as reported)
References
- https://github.com/yhirose/cpp-peglib/issues/121 x_refsource_MISC
- https://github.com/yhirose/cpp-peglib/commit/0061f393de54cf0326621c079dc2988336d1ebb3 x_refsource_MISC