CVE catalog

CVE-2023-29935

llvm-toolchain-13 affected and fixed versions

llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements.count(op) && "operation was already replaced.

Severity: Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Published: May 5, 2023, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.22% · Oct 27, 2026

Projects and upstream resources

[llvm-toolchain-17][Source-reported homepage]

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Version impact has not been established. The original provider fields are retained below.

Provider details and historical evidence

Original provider fields

{
  "package_releases": [
    {
      "name": "llvm-toolchain-13",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "1:13.0.1-11"
    },
    {
      "name": "llvm-toolchain-14",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "1:14.0.6-12"
    },
    {
      "name": "llvm-toolchain-15",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "1:15.0.6-4"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "llvm-toolchain-13",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "unimportant",
      "fixed_version": ""
    },
    {
      "bug": null,
      "name": "llvm-toolchain-14",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "unimportant",
      "fixed_version": ""
    },
    {
      "bug": null,
      "name": "llvm-toolchain-15",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "unimportant",
      "fixed_version": ""
    }
  ],
  "distribution_packages": [
    {
      "name": "llvm-toolchain-13",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "1:13.0.0-2",
        "1:13.0.0-9",
        "1:13.0.1-2ubuntu1",
        "1:13.0.1-2ubuntu2",
        "1:13.0.1-2ubuntu2.1",
        "1:13.0.1-2ubuntu2.2"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2023-29935"
    },
    {
      "name": "llvm-toolchain-14",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "1:14.0.0~+rc1-1",
        "1:14.0.0~+rc1-1ubuntu4",
        "1:14.0.0~+rc4-1ubuntu1",
        "1:14.0.0-1ubuntu1",
        "1:14.0.0-1ubuntu1.1"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2023-29935"
    },
    {
      "name": "llvm-toolchain-15",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "1:15.0.6-3~ubuntu0.22.04.2",
        "1:15.0.7-0ubuntu0.22.04.1",
        "1:15.0.7-0ubuntu0.22.04.2",
        "1:15.0.7-0ubuntu0.22.04.3"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2023-29935"
    },
    {
      "name": "llvm-toolchain-14",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "1:14.0.6-16",
        "1:14.0.6-16build1",
        "1:14.0.6-16build2",
        "1:14.0.6-19build2",
        "1:14.0.6-19build4"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2023-29935"
    },
    {
      "name": "llvm-toolchain-15",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "1:15.0.7-10",
        "1:15.0.7-10build1",
        "1:15.0.7-10build2",
        "1:15.0.7-10ubuntu1",
        "1:15.0.7-11",
        "1:15.0.7-14build1",
        "1:15.0.7-14build3"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2023-29935"
    },
    {
      "name": "llvm-toolchain-14",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "25.10",
      "versions": [
        "1:14.0.6-20ubuntu1",
        "1:14.0.6-20ubuntu3"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2023-29935"
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[bolt-15]Unknown
Source package: [llvm-toolchain-15]
Details (1)
- 1:15.0.6-4+b1 · amd64 · bookworm
  Affected
  dsa · llvm-toolchain-15 · debian · bookworm; dsa · llvm-toolchain-15 · debian · 12
[clang-13]Unknown
Source package: [llvm-toolchain-13]
Details (2)
- 1:13.0.1-11+b2 · amd64 · bookworm
  Affected
  dsa · llvm-toolchain-13 · debian · bookworm; dsa · llvm-toolchain-13 · debian · 12
- 1:13.0.1-11+b2 · arm64 · bookworm
  Affected
  dsa · llvm-toolchain-13 · debian · bookworm; dsa · llvm-toolchain-13 · debian · 12
[clang-13-doc]Unknown
Source package: [llvm-toolchain-13]
Details (2)
- 1:13.0.1-11 · all · bookworm
  Affected
  dsa · llvm-toolchain-13 · debian · bookworm; dsa · llvm-toolchain-13 · debian · 12
- 1:13.0.1-11 · all · bookworm
  Affected
  dsa · llvm-toolchain-13 · debian · bookworm; dsa · llvm-toolchain-13 · debian · 12
[clang-13-examples]Unknown
Source package: [llvm-toolchain-13]
Details (2)
- 1:13.0.1-11+b2 · amd64 · bookworm
  Affected
  dsa · llvm-toolchain-13 · debian · bookworm; dsa · llvm-toolchain-13 · debian · 12
- 1:13.0.1-11+b2 · arm64 · bookworm
  Affected
  dsa · llvm-toolchain-13 · debian · bookworm; dsa · llvm-toolchain-13 · debian · 12
[clang-14]Unknown
Source package: [llvm-toolchain-14]
Details (2)
- 1:14.0.6-12 · amd64 · bookworm
  Affected
  dsa · llvm-toolchain-14 · debian · bookworm; dsa · llvm-toolchain-14 · debian · 12
- 1:14.0.6-12 · arm64 · bookworm
  Affected
  dsa · llvm-toolchain-14 · debian · bookworm; dsa · llvm-toolchain-14 · debian · 12
[clang-14-doc]Unknown
Source package: [llvm-toolchain-14]
Details (2)
- 1:14.0.6-12 · all · bookworm
  Affected
  dsa · llvm-toolchain-14 · debian · bookworm; dsa · llvm-toolchain-14 · debian · 12
- 1:14.0.6-12 · all · bookworm
  Affected
  dsa · llvm-toolchain-14 · debian · bookworm; dsa · llvm-toolchain-14 · debian · 12
[clang-14-examples]Unknown
Source package: [llvm-toolchain-14]
Details (2)
- 1:14.0.6-12 · amd64 · bookworm
  Affected
  dsa · llvm-toolchain-14 · debian · bookworm; dsa · llvm-toolchain-14 · debian · 12
- 1:14.0.6-12 · arm64 · bookworm
  Affected
  dsa · llvm-toolchain-14 · debian · bookworm; dsa · llvm-toolchain-14 · debian · 12
[clang-15]Unknown
Source package: [llvm-toolchain-15]
Details (2)
- 1:15.0.6-4+b1 · amd64 · bookworm
  Affected
  dsa · llvm-toolchain-15 · debian · bookworm; dsa · llvm-toolchain-15 · debian · 12
- 1:15.0.6-4+b1 · arm64 · bookworm
  Affected
  dsa · llvm-toolchain-15 · debian · bookworm; dsa · llvm-toolchain-15 · debian · 12
[clang-15-doc]Unknown
Source package: [llvm-toolchain-15]
Details (2)
- 1:15.0.6-4 · all · bookworm
  Affected
  dsa · llvm-toolchain-15 · debian · bookworm; dsa · llvm-toolchain-15 · debian · 12
- 1:15.0.6-4 · all · bookworm
  Affected
  dsa · llvm-toolchain-15 · debian · bookworm; dsa · llvm-toolchain-15 · debian · 12
[clang-15-examples]Unknown
Source package: [llvm-toolchain-15]
Details (2)
- 1:15.0.6-4+b1 · amd64 · bookworm
  Affected
  dsa · llvm-toolchain-15 · debian · bookworm; dsa · llvm-toolchain-15 · debian · 12
- 1:15.0.6-4+b1 · arm64 · bookworm
  Affected
  dsa · llvm-toolchain-15 · debian · bookworm; dsa · llvm-toolchain-15 · debian · 12
[clangd-13]Unknown
Source package: [llvm-toolchain-13]
Details (2)
- 1:13.0.1-11+b2 · amd64 · bookworm
  Affected
  dsa · llvm-toolchain-13 · debian · bookworm; dsa · llvm-toolchain-13 · debian · 12
- 1:13.0.1-11+b2 · arm64 · bookworm
  Affected
  dsa · llvm-toolchain-13 · debian · bookworm; dsa · llvm-toolchain-13 · debian · 12
[clangd-14]Unknown
Source package: [llvm-toolchain-14]
Details (2)
- 1:14.0.6-12 · amd64 · bookworm
  Affected
  dsa · llvm-toolchain-14 · debian · bookworm; dsa · llvm-toolchain-14 · debian · 12
- 1:14.0.6-12 · arm64 · bookworm
  Affected
  dsa · llvm-toolchain-14 · debian · bookworm; dsa · llvm-toolchain-14 · debian · 12
[clangd-15]Unknown
Source package: [llvm-toolchain-15]
Details (2)
- 1:15.0.6-4+b1 · amd64 · bookworm
  Affected
  dsa · llvm-toolchain-15 · debian · bookworm; dsa · llvm-toolchain-15 · debian · 12
- 1:15.0.6-4+b1 · arm64 · bookworm
  Affected
  dsa · llvm-toolchain-15 · debian · bookworm; dsa · llvm-toolchain-15 · debian · 12
[clang-format-13]Unknown
Source package: [llvm-toolchain-13]
Details (2)
- 1:13.0.1-11+b2 · amd64 · bookworm
  Affected
  dsa · llvm-toolchain-13 · debian · bookworm; dsa · llvm-toolchain-13 · debian · 12
- 1:13.0.1-11+b2 · arm64 · bookworm
  Affected
  dsa · llvm-toolchain-13 · debian · bookworm; dsa · llvm-toolchain-13 · debian · 12
[clang-format-14]Unknown
Source package: [llvm-toolchain-14]
Details (2)
- 1:14.0.6-12 · amd64 · bookworm
  Affected
  dsa · llvm-toolchain-14 · debian · bookworm; dsa · llvm-toolchain-14 · debian · 12
- 1:14.0.6-12 · arm64 · bookworm
  Affected
  dsa · llvm-toolchain-14 · debian · bookworm; dsa · llvm-toolchain-14 · debian · 12
[clang-format-15]Unknown
Source package: [llvm-toolchain-15]
Details (2)
- 1:15.0.6-4+b1 · amd64 · bookworm
  Affected
  dsa · llvm-toolchain-15 · debian · bookworm; dsa · llvm-toolchain-15 · debian · 12
- 1:15.0.6-4+b1 · arm64 · bookworm
  Affected
  dsa · llvm-toolchain-15 · debian · bookworm; dsa · llvm-toolchain-15 · debian · 12
[clang-tidy-13]Unknown
Source package: [llvm-toolchain-13]
Details (2)
- 1:13.0.1-11+b2 · amd64 · bookworm
  Affected
  dsa · llvm-toolchain-13 · debian · bookworm; dsa · llvm-toolchain-13 · debian · 12
- 1:13.0.1-11+b2 · arm64 · bookworm
  Affected
  dsa · llvm-toolchain-13 · debian · bookworm; dsa · llvm-toolchain-13 · debian · 12
[clang-tidy-14]Unknown
Source package: [llvm-toolchain-14]
Details (2)
- 1:14.0.6-12 · amd64 · bookworm
  Affected
  dsa · llvm-toolchain-14 · debian · bookworm; dsa · llvm-toolchain-14 · debian · 12
- 1:14.0.6-12 · arm64 · bookworm
  Affected
  dsa · llvm-toolchain-14 · debian · bookworm; dsa · llvm-toolchain-14 · debian · 12
[clang-tidy-15]Unknown
Source package: [llvm-toolchain-15]
Details (2)
- 1:15.0.6-4+b1 · amd64 · bookworm
  Affected
  dsa · llvm-toolchain-15 · debian · bookworm; dsa · llvm-toolchain-15 · debian · 12
- 1:15.0.6-4+b1 · arm64 · bookworm
  Affected
  dsa · llvm-toolchain-15 · debian · bookworm; dsa · llvm-toolchain-15 · debian · 12
[clang-tools-13]Unknown
Source package: [llvm-toolchain-13]
Details (2)
- 1:13.0.1-11+b2 · amd64 · bookworm
  Affected
  dsa · llvm-toolchain-13 · debian · bookworm; dsa · llvm-toolchain-13 · debian · 12
- 1:13.0.1-11+b2 · arm64 · bookworm
  Affected
  dsa · llvm-toolchain-13 · debian · bookworm; dsa · llvm-toolchain-13 · debian · 12

Next results

Observed: Oct 28, 2026, 5:46:45 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]