Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-45856 State: PUBLISHED Published: 2023-10-14T00:00:00 Last Updated: 2024-09-17T13:37:29.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: qdPM 9.2 allows remote code execution by using the Add Attachments feature of Edit Project to upload a .php file to the /uploads URI. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://qdpm.net - https://github.com/SunshineOtaku/Report-CVE/blob/main/qdPM/9.2/RCE.md
CVE ID: CVE-2023-45857 State: PUBLISHED Published: 2023-11-08T00:00:00 Last Updated: 2024-09-04T15:15:16.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/axios/axios/issues/6006 - https://security.netapp.com/advisory/ntap-20240621-0006/
CVE ID: CVE-2023-45859 State: PUBLISHED Published: 2024-02-28T00:00:00 Last Updated: 2024-11-29T16:42:41.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions properly, allowing authenticated users to access data stored in the cluster. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/hazelcast/hazelcast/pull/25509 - https://github.com/hazelcast/hazelcast/security/advisories/GHSA-xh6m-7cr7-xx66
CVE ID: CVE-2023-45860 State: PUBLISHED Published: 2024-02-16T00:00:00 Last Updated: 2024-11-06T16:20:00.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Hazelcast Platform through 5.3.4, a security issue exists within the SQL mapping for the CSV File Source connector. This issue arises from inadequate permission checking, which could enable unauthorized clients to access data from files stored on a member's filesystem. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/hazelcast/hazelcast/pull/25348 - https://github.com/hazelcast/hazelcast/security/advisories/GHSA-8h4x-xvjp-vf99
CVE ID: CVE-2023-45862 State: PUBLISHED Published: 2023-10-14T00:00:00 Last Updated: 2024-08-02T20:29:32.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5. An object could potentially extend beyond the end of an allocation. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ce33e64c1788912976b61314b56935abd4bc97ef - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.5 - https://security.netapp.com/advisory/ntap-20231116-0004/
CVE ID: CVE-2023-45863 State: PUBLISHED Published: 2023-10-14T00:00:00 Last Updated: 2024-08-02T20:29:32.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3. With root access, an attacker can trigger a race condition that results in a fill_kobj_path out-of-bounds write. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3bb2a01caa813d3a1845d378bbe4169ef280d394 - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.3 - https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html - https://lists.debian.org/
el/v6.x/ChangeLog-6.2.3 - https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html - https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html
CVE ID: CVE-2023-45864 State: PUBLISHED Published: 2023-12-13T00:00:00.000Z Last Updated: 2025-05-22T18:37:26.197Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AC:H/AV:L/A:N/C:N/I:H/PR:H/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: A race condition issue discovered in Samsung Mobile Processor Exynos 9820, 980, 1080, 2100, 2200, 1280, and 1380 allows unintended modifications of values within certain areas. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://semiconductor.samsung.com/support/quality-support/product-security-updates/
CVE ID: CVE-2023-45866 State: PUBLISHED Published: 2023-12-08T00:00:00.000Z Last Updated: 2025-11-04T19:25:32.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases, a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue. Additional Analyst Notes: - CVE Program Con
0556 mitigation would have already addressed this Bluetooth HID Hosts issue. Additional Analyst Notes: - CVE Program Container: References: - https://bluetooth.com - http://changelogs.ubuntu.com/changelogs/pool/main/b/bluez/bluez_5.64-0ubuntu1/changelog - https://github.com/skysafe/reblog/tree/main/cve-2023-45866 - https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/profiles/input?id=25a471a83e02e1effb15d5a488b3f0085eaeb675 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D2N2P5LMP3V7IJONALV2KOFL4NUU23CJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/77YQQS5FXPYE6WBBZO3REFIRAUJHERFA/
ts.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/77YQQS5FXPYE6WBBZO3REFIRAUJHERFA/ - https://support.apple.com/kb/HT214036 - https://support.apple.com/kb/HT214035 - http://seclists.org/fulldisclosure/2023/Dec/9 - http://seclists.org/fulldisclosure/2023/Dec/7 - https://lists.debian.org/debian-lts-announce/2023/12/msg00011.html - https://www.debian.org/security/2023/dsa-5584 - https://security.gentoo.org/glsa/202401-03
CVE ID: CVE-2023-45867 State: PUBLISHED Published: 2023-10-26T00:00:00 Last Updated: 2024-09-12T14:15:25.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: ILIAS (2013-09-12 release) contains a medium-criticality Directory Traversal local file inclusion vulnerability in the ScormAicc module. An attacker with a privileged account, typically holding the tutor role, can exploit this to gain unauthorized access to and potentially retrieve confidential files stored on the web server. The attacker can access files that are readable by the web server user www-data; this may include sensitive configuration files and documents located outside the documentRoot. The vulnerability is exploi
is may include sensitive configuration files and documents located outside the documentRoot. The vulnerability is exploited by an attacker who manipulates the file parameter in a URL, inserting directory traversal sequences in order to access unauthorized files. This manipulation allows the attacker to retrieve sensitive files, such as /etc/passwd, potentially compromising the system's security. This issue poses a significant risk to confidentiality and is remotely exploitable over the internet. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rehmeinfosec.de - https://rehmeinfosec.de/labor/cve-2023-45867
CVE ID: CVE-2023-45868 State: PUBLISHED Published: 2023-10-26T00:00:00 Last Updated: 2024-08-02T20:29:32.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Learning Module in ILIAS 7.25 (2023-09-12 release) allows an attacker (with basic user privileges) to achieve a high-impact Directory Traversal attack on confidentiality and availability. By exploiting this network-based vulnerability, the attacker can move specified directories, normally outside the documentRoot, to a publicly accessible location via the PHP function rename(). This results in a total loss of confidentiality, exposing sensitive resources, and potentially denying access to the affected component and the op
ss of confidentiality, exposing sensitive resources, and potentially denying access to the affected component and the operating system's components. To exploit this, an attacker must manipulate a POST request during the creation of an exercise unit, by modifying the old_name and new_name parameters via directory traversal. However, it's essential to note that, when exploiting this vulnerability, the specified directory will be relocated from its original location, rendering all files obtained from there unavailable. Additional Analyst Notes: - CVE Program Container: References: - https://rehmeinfosec.de - https://rehmeinfosec.de/labor/cve-2023-45867
CVE ID: CVE-2023-45869 State: PUBLISHED Published: 2023-10-26T00:00:00 Last Updated: 2024-09-12T20:46:22.287Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: ILIAS 7.25 (2023-09-12) allows any authenticated user to execute arbitrary operating system commands remotely, when a highly privileged account accesses an XSS payload. The injected commands are executed via the exec() function in the execQuoted() method of the ilUtil class (/Services/Utilities/classes/class.ilUtil.php) This allows attackers to inject malicious commands into the system, potentially compromising the integrity, confidentiality, and availab
ckers to inject malicious commands into the system, potentially compromising the integrity, confidentiality, and availability of the ILIAS installation and the underlying operating system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://rehmeinfosec.de/report/358ad5f6-f712-4f74-a5ee-476efc856cbc/ - https://rehmeinfosec.de/labor/cve-2023-45869
CVE ID: CVE-2023-45871 State: PUBLISHED Published: 2023-10-15T00:00:00 Last Updated: 2024-08-02T20:29:32.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not be adequate for frames larger than the MTU. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=bb5ed01cd2428cd25b1c88a3a9cba87055eb289f - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.3 - https://security.netapp.com/advisory/ntap-20231110-0001/ - https://lists.debian.org/debian-lts-an
v6.x/ChangeLog-6.5.3 - https://security.netapp.com/advisory/ntap-20231110-0001/ - https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
CVE ID: CVE-2023-45872 State: PUBLISHED Published: 2024-10-09T00:00:00 Last Updated: 2024-11-12T20:17:09.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Qt before 6.2.11 and 6.3.x through 6.6.x before 6.6.1. When a QML image refers to an image whose content is not known yet, there is an assumption that it is an SVG document, leading to a denial of service (application crash) if it is not actually an SVG document. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://qt.io - https://bugzilla.redhat.com/show_bug.cgi?id=2246067
CVE ID: CVE-2023-45873 State: PUBLISHED Published: 2024-02-28T00:00:00 Last Updated: 2024-11-05T14:31:13.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service (application exist) because of the OOM killer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://forums.couchbase.com/tags/security - https://docs.couchbase.com/server/current/release-notes/relnotes.html - https://www.couchbase.com/alerts/
CVE ID: CVE-2023-45874 State: PUBLISHED Published: 2024-02-28T00:00:00.000Z Last Updated: 2025-03-26T20:50:29.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service (outage of reader threads). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://forums.couchbase.com/tags/security - https://docs.couchbase.com/server/current/release-notes/relnotes.html - https://www.couchbase.com/alerts/
CVE ID: CVE-2023-45875 State: PUBLISHED Published: 2023-11-08T00:00:00 Last Updated: 2024-09-04T15:12:41.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Couchbase Server 7.2.0. There is a private key leak in debug.log while adding a pre-7.0 node to a 7.2 cluster. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forums.couchbase.com/tags/security - https://docs.couchbase.com/server/current/release-notes/relnotes.html - https://www.couchbase.com/alerts/
CVE ID: CVE-2023-45878 State: PUBLISHED Published: 2023-11-14T00:00:00 Last Updated: 2025-01-08T16:45:47.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubrics_visualise_saveAjax.phps does not require authentication. The endpoint accepts the img, path, and gibbonPersonID parameters. The img parameter is expected to be a base64 encoded image. If the path parameter is set, the defined path is used as the destination folder, concatenated with the absolute path of the installation directory. The content of the img parameter is base64 decoded and written to the defined file path. This allows creation o
rectory. The content of the img parameter is base64 decoded and written to the defined file path. This allows creation of PHP files that permit Remote Code Execution (unauthenticated). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://herolab.usd.de/security-advisories/usd-2023-0025/
CVE ID: CVE-2023-45879 State: PUBLISHED Published: 2023-11-14T00:00:00 Last Updated: 2024-09-03T15:21:32.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: GibbonEdu Gibbon version 25.0.0 allows HTML Injection via an IFRAME element to the Messager component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://herolab.usd.de/security-advisories/usd-2023-0019/
CVE ID: CVE-2023-45880 State: PUBLISHED Published: 2023-11-14T00:00:00 Last Updated: 2024-09-03T15:18:59.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: GibbonEdu Gibbon through version 25.0.0 allows Directory Traversal via the report template builder. An attacker can create a new Asset Component. The templateFileDestination parameter can be set to an arbitrary pathname (and extension). This allows creation of PHP files outside of the uploads directory, directly in the webroot. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://herolab.usd.de/security-advisories/usd-2023-0022/
CVE ID: CVE-2023-45881 State: PUBLISHED Published: 2023-11-14T00:00:00 Last Updated: 2024-09-03T15:16:14.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: GibbonEdu Gibbon through version 25.0.0 allows /modules/Planner/resources_addQuick_ajaxProcess.php file upload with resultant XSS. The imageAsLinks parameter must be set to Y to return HTML code. The filename attribute of the bodyfile1 parameter is reflected in the response. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://herolab.usd.de/security-advisories/usd-2023-0024/
CVE ID: CVE-2023-45883 State: PUBLISHED Published: 2023-10-19T00:00:00 Last Updated: 2024-09-12T18:26:21.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: A privilege escalation vulnerability exists within the Qumu Multicast Extension v2 before 2.0.63 for Windows. When a standard user triggers a repair of the software, a pop-up window opens with SYSTEM privileges. Standard users may use this to gain arbitrary code execution as SYSTEM. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vidyo.com/enterprise-video-management/qumu - https://hackandpwn.com/disclosures/CVE-2023-45883.pdf
CVE ID: CVE-2023-45884 State: PUBLISHED Published: 2023-11-09T00:00:00 Last Updated: 2024-09-04T14:56:35.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.linkedin.com/pulse/xss-nasas-open-mct-v302-visionspace-technologies-ubg4f
CVE ID: CVE-2023-45885 State: PUBLISHED Published: 2023-11-09T00:00:00 Last Updated: 2024-09-04T13:56:29.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.linkedin.com/pulse/xss-nasas-open-mct-v302-visionspace-technologies-ubg4f
CVE ID: CVE-2023-45886 State: PUBLISHED Published: 2023-11-21T00:00:00 Last Updated: 2024-08-02T20:29:32.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update messages containing a malformed attribute. Additional Analyst Notes: - CVE Program Container: References: - https://blog.benjojo.co.uk/post/bgp-path-attributes-grave-error-handling - https://www.kb.cert.org/vuls/id/347067 - https://www.ipinfusion.com/doc_prod_cat/zebos/ - https://my.f5.com/manage/s/article/K000137315
CVE ID: CVE-2023-45887 State: PUBLISHED Published: 2023-12-19T00:00:00 Last Updated: 2024-08-02T20:29:32.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: DS Wireless Communication (DWC) with DWC_VERSION_3 and DWC_VERSION_11 allows remote attackers to execute arbitrary code on a game-playing client's machine via a modified GPCM message. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MikeIsAStar/DS-Wireless-Communication-Remote-Code-Execution - https://pastebin.com/ukRzztv0 - http://packetstormsecurity.com/files/177135/DS-Wireless-Communication-Code-Execution.html
CVE ID: CVE-2023-45889 State: PUBLISHED Published: 2024-01-23T00:00:00.000Z Last Updated: 2025-05-30T14:21:11.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Universal Cross Site Scripting (UXSS) vulnerability in ClassLink OneClick Extension through 10.8 allows remote attackers to inject JavaScript into any webpage. NOTE: this issue exists because of an incomplete fix for CVE-2022-48612. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://blog.zerdle.net/classlink/ - https://blog.zerdle.net/classlink2/
CVE ID: CVE-2023-45892 State: PUBLISHED Published: 2024-01-02T00:00:00.000Z Last Updated: 2025-05-13T19:35:42.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in the Order and Invoice pages in Floorsight Insights Q3 2023 allows an unauthenticated remote attacker to view sensitive customer information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Oracle-Security/CVEs/blob/main/FloorsightSoftware/CVE-2023-45892.md
CVE ID: CVE-2023-45893 State: PUBLISHED Published: 2024-01-02T00:00:00 Last Updated: 2024-09-06T17:59:59.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: An indirect Object Reference (IDOR) in the Order and Invoice pages in Floorsight Customer Portal Q3 2023 allows an unauthenticated remote attacker to view sensitive customer information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Oracle-Security/CVEs/blob/main/FloorsightSoftware/CVE-2023-45893.md
CVE ID: CVE-2023-45894 State: PUBLISHED Published: 2023-12-14T00:00:00 Last Updated: 2024-08-02T20:29:32.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Remote Application Server in Parallels RAS before 19.2.23975 does not segment virtualized applications from the server, which allows a remote attacker to achieve remote code execution via standard kiosk breakout techniques. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Oracle-Security/CVEs/blob/main/Parallels%20Remote%20Server/readme.md
CVE ID: CVE-2023-45896 State: PUBLISHED Published: 2024-08-28T00:00:00.000Z Last Updated: 2025-11-03T21:49:54.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: ntfs3 in the Linux kernel through 6.8.0 allows a physically proximate attacker to read kernel memory by mounting a filesystem (e.g., if a Linux distribution is configured to allow unprivileged mounts of removable media) and then leveraging local access to trigger an out-of-bounds read. A length value can be larger than the amount of memory allocated. NOTE: the supplier's perspective is that there is no vulnerability when an attack requires an attacker-modified filesystem image. Additional Analyst Notes: - CISA ADP Vulnri
vulnerability when an attack requires an attacker-modified filesystem image. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://dfir.ru/2024/06/19/vulnerabilities-in-7-zip-and-ntfs3/ - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.11 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=013ff63b649475f0ee134e2c8d0c8e65284ede50 - https://github.com/torvalds/linux/commit/013ff63b649475f0ee134e2c8d0c8e65284ede50
CVE ID: CVE-2023-45897 State: PUBLISHED Published: 2023-10-28T00:00:00 Last Updated: 2024-09-05T14:53:21.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: exfatprogs before 1.2.2 allows out-of-bounds memory access, such as in read_file_dentry_set. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/exfatprogs/exfatprogs/commit/ec78688e5fb5a70e13df82b4c0da1e6228d3ccdf - https://github.com/exfatprogs/exfatprogs/releases/tag/1.2.2 - https://github.com/exfatprogs/exfatprogs/commit/22d0e43e8d24119cbfc6efafabb0dec6517a86c4 - https://github.com/exfatprogs/exfatprogs/commit/4abc55e976573991e6a1117bb2b3711e59da07ae - https://dfir.
0dec6517a86c4 - https://github.com/exfatprogs/exfatprogs/commit/4abc55e976573991e6a1117bb2b3711e59da07ae - https://dfir.ru/2023/11/01/cve-2023-45897-a-vulnerability-in-the-linux-exfat-userspace-tools/
CVE ID: CVE-2023-45898 State: PUBLISHED Published: 2023-10-16T00:00:00.000Z Last Updated: 2025-05-01T15:57:31.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extents_status.c, related to ext4_es_insert_extent. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lore.kernel.org/lkml/aa03f191-445c-0d2e-d6d7-0a3208d7df7a%40huawei.com/T/ - https://www.spinics.net/lists/stable-commits/msg317086.html - https://lkml.org/lkml/2023/8/13/477 - https://github.com/torvalds/linux/commit/768d612f79822d30a1e7d132a4d4b05337ce42ec - https://cdn.kernel.org/pub/linux/kernel/v6.x/Chan
b.com/torvalds/linux/commit/768d612f79822d30a1e7d132a4d4b05337ce42ec - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.4