Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
https://patchstack.com/database/vulnerability/booking-system/wordpress-pinpoint-booking-system-plugin-2-9-9-3-4-parameter-tampering?_s_id=cve
CVE ID: CVE-2023-38521 State: PUBLISHED Published: 2023-09-03T11:08:25.135Z Last Updated: 2024-09-24T18:57:40.837Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Exifography Products: Exifography Problem Types: CWE-79 Description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Exifography plugin <= 1.3.1 versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/thesography/wordpress-exifography-plugin-1-3-1-cross-site-scripting-xss?_s_id=cve
CVE ID: CVE-2023-38522 State: PUBLISHED Published: 2024-07-26T09:11:20.419Z Last Updated: 2025-11-03T21:49:13.216Z Vendors: Apache Software Foundation Products: Apache Traffic Server Problem Types: CWE-444 Description: Apache Traffic Server accepts characters that are not allowed for HTTP field names and forwards malformed requests to origin servers. This can be utilized for request smuggling and may also lead cache poisoning if the origin servers are vulnerable. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.10, from 9.0.0 through 9.2.4. Users are recommended to upgrade to version 8.1.11 or 9.2.5, which fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: -
nded to upgrade to version 8.1.11 or 9.2.5, which fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/c4mcmpblgl8kkmyt56t23543gp8v56m0
CVE ID: CVE-2023-38523 State: PUBLISHED Published: 2023-07-20T00:00:00 Last Updated: 2024-10-28T13:40:56.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory, without authentication, exposing sensitive information such as the command history and screenshot of the file being processed. This affects N-Series N1115 Wallplate Video Encoder before 1.15.61, N-Series N1x22A Video Encoder/Decoder before 1.15.61, N-Series N1x33A Video Encoder/Decoder before 1.15.61, N-Series N1x33 Video Encoder/Decoder before 1.15.61, N-Series N2x35 Video Encoder/Decoder before 1.15.61, N-Seri
.15.61, N-Series N1x33 Video Encoder/Decoder before 1.15.61, N-Series N2x35 Video Encoder/Decoder before 1.15.61, N-Series N2x35A Video Encoder/Decoder before 1.15.61, N-Series N2xx2 Video Encoder/Decoder before 1.15.61, N-Series N2xx2A Video Encoder/Decoder before 1.15.61, N-Series N3000 Video Encoder/Decoder before 2.12.105, and N-Series N4321 Audio Transceiver before 1.00.06. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://help.harmanpro.com/n1115-svsi-firmware - https://help.harmanpro.com/n1x22a-updater - https://help.harmanpro.com/n1x33a-updater - https://help.harmanpro.com/n1x33-updater - https://help.harmanpro.com/n2x35-updater-hotfix
rmanpro.com/n1x33a-updater - https://help.harmanpro.com/n1x33-updater - https://help.harmanpro.com/n2x35-updater-hotfix - https://help.harmanpro.com/n2x35a-updater-hotfix - https://help.harmanpro.com/n2xx2-updater-hotfix - https://help.harmanpro.com/n2xx2a-updater - https://help.harmanpro.com/svsi-n4321-firmware - https://help.harmanpro.com/n3k-updater-hotfix - https://wiki.notveg.ninja/blog/CVE-2023-38523/
CVE ID: CVE-2023-38524 State: PUBLISHED Published: 2023-08-08T09:20:32.849Z Last Updated: 2025-02-27T21:10:10.639Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: Siemens Products: Parasolid V34.1, Parasolid V35.0, Parasolid V35.1, Teamcenter Visualization V14.1, Teamcenter Visualization V14.2, Teamcenter Visualization V14.3 Problem Types: CWE-476 Description: A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.171), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Te
eamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.3). The affected applications contain null pointer dereference while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-407785.pdf - https://cert-portal.siemens.com/productcert/html/ssa-407785.html
CVE ID: CVE-2023-38525 State: PUBLISHED Published: 2023-08-08T09:20:33.970Z Last Updated: 2025-02-27T21:10:04.475Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Parasolid V34.1, Parasolid V35.0, Parasolid V35.1, Teamcenter Visualization V14.1, Teamcenter Visualization V14.2, Teamcenter Visualization V14.3 Problem Types: CWE-125 Description: A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.171), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), T
Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.3). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-407785.pdf - https://cert-portal.siemens.com/productcert/html/ssa-407785.html
CVE ID: CVE-2023-38526 State: PUBLISHED Published: 2023-08-08T09:20:35.106Z Last Updated: 2025-02-27T21:09:58.842Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Parasolid V34.1, Parasolid V35.0, Parasolid V35.1, Teamcenter Visualization V14.1, Teamcenter Visualization V14.2, Teamcenter Visualization V14.3 Problem Types: CWE-125 Description: A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.171), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), T
CVE ID: CVE-2023-38527 State: PUBLISHED Published: 2023-08-08T09:20:36.244Z Last Updated: 2025-02-27T21:09:53.107Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Parasolid V34.1, Parasolid V35.0, Teamcenter Visualization V14.1, Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312 Problem Types: CWE-125 Description: A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Teamcenter Visualization V14.1 (All versions), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versio
1 (All versions), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-407785.pdf - https://cert-portal.siemens.com/productcert/html/ssa-407785.html
CVE ID: CVE-2023-38528 State: PUBLISHED Published: 2023-08-08T09:20:37.393Z Last Updated: 2024-10-15T18:33:06.845Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Parasolid V34.1, Parasolid V35.0, Parasolid V35.1, Teamcenter Visualization V14.1, Teamcenter Visualization V14.2, Teamcenter Visualization V14.3 Problem Types: CWE-787 Description: A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.197), Parasolid V35.1 (All versions < V35.1.184), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visua
Parasolid V35.1 (All versions < V35.1.184), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.3). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted X_T file. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-407785.pdf - https://cert-portal.siemens.com/productcert/html/ssa-407785.html
CVE ID: CVE-2023-38529 State: PUBLISHED Published: 2023-08-08T09:20:38.540Z Last Updated: 2025-02-27T21:09:47.625Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Parasolid V34.1, Parasolid V35.0, Parasolid V35.1, Teamcenter Visualization V14.1, Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312 Problem Types: CWE-125 Description: A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.184), Teamcenter Visualization V14.1 (All versions), Teamcenter Visualization V14.2 (All versi
5.1 (All versions < V35.1.184), Teamcenter Visualization V14.1 (All versions), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-407785.pdf - https://cert-portal.siemens.com/productcert/html/ssa-407785.html
CVE ID: CVE-2023-38530 State: PUBLISHED Published: 2023-08-08T09:20:39.660Z Last Updated: 2025-02-27T21:09:41.320Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Parasolid V34.1, Parasolid V35.0, Parasolid V35.1, Teamcenter Visualization V14.1, Teamcenter Visualization V14.2, Teamcenter Visualization V14.3 Problem Types: CWE-125 Description: A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.171), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), T
CVE ID: CVE-2023-38531 State: PUBLISHED Published: 2023-08-08T09:20:40.773Z Last Updated: 2024-08-13T07:50:39.222Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Parasolid V34.1, Parasolid V35.0, Parasolid V35.1, Teamcenter Visualization V14.1, Teamcenter Visualization V14.2, Teamcenter Visualization V14.3, Teamcenter Visualization V2312 Problem Types: CWE-125 Description: A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.184), Teamcenter Visualization V14.1 (All versions), Teamcenter Visualization V14.2 (All versi
5.1 (All versions < V35.1.184), Teamcenter Visualization V14.1 (All versions), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-407785.pdf - https://cert-portal.siemens.com/productcert/html/ssa-407785.html
CVE ID: CVE-2023-38532 State: PUBLISHED Published: 2023-08-08T09:20:41.916Z Last Updated: 2024-11-25T21:18:29.388Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: Siemens Products: Parasolid V34.1, Parasolid V35.0, Parasolid V35.1, Teamcenter Visualization V14.1, Teamcenter Visualization V14.2, Teamcenter Visualization V14.3 Problem Types: CWE-770 Description: A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions < V35.1.171), Teamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Te
eamcenter Visualization V14.1 (All versions < V14.1.0.11), Teamcenter Visualization V14.2 (All versions < V14.2.0.6), Teamcenter Visualization V14.3 (All versions < V14.3.0.3). The affected application contains a stack exhaustion vulnerability while parsing a specially crafted X_T file. This could allow an attacker to cause denial of service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-407785.pdf - https://cert-portal.siemens.com/productcert/html/ssa-407785.html
CVE ID: CVE-2023-38533 State: PUBLISHED Published: 2024-06-11T11:14:55.951Z Last Updated: 2024-08-02T17:46:55.859Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:T/RC:C) Vendors: Siemens Products: TIA Administrator Problem Types: CWE-379 Description: A vulnerability has been identified in TIA Administrator (All versions < V3 SP2). The affected component creates temporary download files in a directory with insecure permissions. This could allow any authenticated attacker on Windows to disrupt the update process. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/html/ssa-319319.html
CVE ID: CVE-2023-38534 State: PUBLISHED Published: 2024-03-13T21:17:16.664Z Last Updated: 2024-08-28T18:27:38.589Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: OpenText™ Products: Exceed Turbo X Problem Types: CWE-287 Description: Improper authentication vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.0 and 12.5.1. The vulnerability could allow disclosure of restricted information in unauthenticated RPC. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.opentext.com/csm?id=kb_article_view&sysparm_article=KB0796609
CVE ID: CVE-2023-38535 State: PUBLISHED Published: 2024-03-13T21:17:47.507Z Last Updated: 2024-08-02T17:46:56.001Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: OpenText™ Products: Exceed Turbo X Problem Types: CWE-321 Description: Use of Hard-coded Cryptographic Key vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.1 and 12.5.2. The vulnerability could compromise the cryptographic keys. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.opentext.com/csm?id=kb_article_view&sysparm_article=KB0801267
CVE ID: CVE-2023-38536 State: PUBLISHED Published: 2024-03-13T21:18:01.493Z Last Updated: 2024-08-02T17:46:55.999Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:H) Vendors: OpenText™ Products: Exceed Turbo X Problem Types: CWE-79 Description: HTML injection in OpenText™ Exceed Turbo X affecting version 12.5.1. The vulnerability could result in Cross site scripting. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.opentext.com/csm?id=kb_article_view&sysparm_article=KB0796182
CVE ID: CVE-2023-38537 State: PUBLISHED Published: 2023-10-04T19:09:58.086Z Last Updated: 2024-09-19T15:27:23.286Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C) Vendors: Facebook Products: WhatsApp Desktop for Mac, WhatsApp Desktop for Windows, WhatsApp Business for iOS, WhatsApp for iOS, WhatsApp Business for Android, WhatsApp for Android Problem Types: CWE-416, CWE-366 Description: A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced incoming audio/video calls that could have resulted in app termination or unexpected control flow with very low probability. Additional Analyst Notes: - CVE P
have resulted in app termination or unexpected control flow with very low probability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.whatsapp.com/security/advisories/2023/
CVE ID: CVE-2023-38538 State: PUBLISHED Published: 2023-10-04T19:10:49.627Z Last Updated: 2024-09-19T15:27:48.295Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C) Vendors: Facebook Products: WhatsApp Desktop for Mac, WhatsApp Desktop for Windows, WhatsApp Business for iOS, WhatsApp for iOS, WhatsApp Business for Android, WhatsApp for Android Problem Types: CWE-416, CWE-366 Description: A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could have resulted in app termination or unexpected control flow with very low probability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
unexpected control flow with very low probability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.whatsapp.com/security/advisories/2023/
CVE ID: CVE-2023-38541 State: PUBLISHED Published: 2024-01-19T20:03:14.049Z Last Updated: 2025-06-17T21:19:23.180Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel HID Event Filter drivers for Windows 10 for some Intel NUC laptop software installers Problem Types: escalation of privilege, CWE-277 Description: Insecure inherited permissions in some Intel HID Event Filter drivers for Windows 10 for some Intel NUC laptop software installers before version 2.2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References
on of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00964.html
CVE ID: CVE-2023-38543 State: PUBLISHED Published: 2023-11-14T23:18:08.348Z Last Updated: 2025-01-07T18:57:48.609Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Ivanti Products: Secure Access Client Windows Description: A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally authenticated attacker to exploit a vulnerable configuration, potentially leading to a denial of service (DoS) condition on the user machine. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://forums.ivanti.com/s/article/Security-fixes-included-in-the-latest-Ivanti-Secure-Access-C
ontainer: References: - https://forums.ivanti.com/s/article/Security-fixes-included-in-the-latest-Ivanti-Secure-Access-Client-Release - https://northwave-cybersecurity.com/vulnerability-notice/denial-of-service-in-ivanti-secure-access-client-driver
CVE ID: CVE-2023-38544 State: PUBLISHED Published: 2023-11-14T23:18:08.379Z Last Updated: 2024-08-29T17:18:34.932Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Ivanti Products: Secure Access Linux Description: A logged in user can modify specific files that may lead to unauthorized changes in system-wide configuration settings. This vulnerability could be exploited to compromise the integrity and security of the network on the affected system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-fixes-included-in-the-latest-Ivanti-Secure-Access-Client-Release
CVE ID: CVE-2023-38545 State: PUBLISHED Published: 2023-10-18T03:52:00.816Z Last Updated: 2025-08-27T20:32:53.710Z Vendors: curl Products: curl Description: This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes. If the host name is detected to be longer, curl switches to local name resolving and instead passes on the resolved address only. Due to this bug, the local variable that means "let the host resolve the name" could get the wrong value during a slow SOCKS5 hand
s bug, the local variable that means "let the host resolve the name" could get the wrong value during a slow SOCKS5 handshake, and contrary to the intention, copy the too long host name to the target buffer instead of copying just the resolved address there. The target buffer being a heap based buffer, and the host name coming from the URL that curl has been told to operate with. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://curl.se/docs/CVE-2023-38545.html - https://security.netapp.com/advisory/ntap-20231027-0009/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCH
://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/ - https://www.secpod.com/blog/high-severity-heap-buffer-overflow-vulnerability/ - https://support.apple.com/kb/HT214036 - https://support.apple.com/kb/HT214063 - https://support.apple.com/kb/HT214057 - https://support.apple.com/kb/HT214058 - http://seclists.org/fulldisclosure/2024/Jan/34 - http://seclists.org/fulldisclosure/2024/Jan/37 - http://seclists.org/fulldisclosure/2024/Jan/38 - https://security.netapp.com/advisory/ntap-20240201-0005/ - https://forum.vmssoftware.com/viewtopic.php?f=8&t=8868
CVE ID: CVE-2023-38546 State: PUBLISHED Published: 2023-10-18T03:51:31.276Z Last Updated: 2025-11-04T19:17:18.131Z Vendors: curl Products: curl Description: This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met. libcurl performs transfers. In its API, an application creates "easy handles" that are the individual handles for single transfers. libcurl provides a function call that duplicates en easy handle called [curl_easy_duphandle](https://curl.se/libcurl/c/curl_easy_duphandle.html). If a transfer has cookies enabled when the handle is duplicated, the cookie-enable state is also cloned - but without cloning