Reachable Assertion The advisory has been revoked - it doesn't affect any version of package clang  (opens in a new tab)


Threat Intelligence

EPSS
0.22% (13th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-CENTOS9-CLANG-5805746
  • published26 Jul 2023
  • disclosed5 May 2023

Introduced: 5 May 2023

CVE-2023-29935  (opens in a new tab)
CWE-617  (opens in a new tab)

Amendment

The Centos security team deemed this advisory irrelevant for Centos:9.

NVD Description

Note: Versions mentioned in the description apply only to the upstream clang package and not the clang package as distributed by Centos.

llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements.count(op) && "operation was already replaced.