Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-4595 State: PUBLISHED Published: 2023-11-23T12:38:04.999Z Last Updated: 2024-08-02T07:31:06.614Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: BVRP Software Products: SLmail Problem Types: CWE-538 Description: An information exposure vulnerability has been found, the exploitation of which could allow a remote user to retrieve sensitive information stored on the server such as credential files, configuration files, application files, etc., simply by appending any of the following parameters to the end of the URL: %00 %0a, %20, %2a, %a0, %aa, %c0 and %ca. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe.es/en
0, %2a, %a0, %aa, %c0 and %ca. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-bvrp-software-slmail
CVE ID: CVE-2023-4596 State: PUBLISHED Published: 2023-08-30T01:45:37.073Z Last Updated: 2025-02-05T19:34:56.870Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: wpmudev Products: Forminator – Contact Form, Payment Form & Custom Form Builder Problem Types: CWE-434 Unrestricted Upload of File with Dangerous Type Description: The Forminator plugin for WordPress is vulnerable to arbitrary file uploads due to file type validation occurring after a file has been uploaded to the server in the upload_post_image() function in versions up to, and including, 1.24.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's
including, 1.24.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9cd87da6-1f4c-4a15-8ebb-6e0f8ef72513?source=cve - https://www.exploit-db.com/exploits/51664 - https://plugins.trac.wordpress.org/changeset/2954409/forminator/trunk/library/fields/postdata.php
CVE ID: CVE-2023-4597 State: PUBLISHED Published: 2023-08-30T01:45:36.516Z Last Updated: 2025-02-13T17:14:15.489Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: mostafas1990 Products: Slimstat Analytics Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Slimstat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slimstat' shortcode in versions up to, and including, 5.0.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions
er supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/52aee4b8-f494-4eeb-8357-71ce8d5bc656?source=cve - https://plugins.trac.wordpress.org/browser/wp-slimstat/tags/5.0.9/wp-slimstat.php#L892 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2959452%40wp-slimstat&new=2959452%40wp-slimstat&sfp_email=&sfph_mail= - http://packetstormsecurity.com/files/1
name=&old=2959452%40wp-slimstat&new=2959452%40wp-slimstat&sfp_email=&sfph_mail= - http://packetstormsecurity.com/files/174604/WordPress-Slimstat-Analytics-5.0.9-Cross-Site-Scripting-SQL-Injection.html
CVE ID: CVE-2023-4598 State: PUBLISHED Published: 2023-10-20T06:35:06.294Z Last Updated: 2025-02-05T19:11:37.434Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: mostafas1990 Products: Slimstat Analytics Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The Slimstat Analytics plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 5.0.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with contributor-level and ab
preparation on the existing SQL query. This makes it possible for authenticated attackers with contributor-level and above permissions to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/07c0f5a5-3455-4f06-b481-f4d678309c50?source=cve - https://plugins.trac.wordpress.org/browser/wp-slimstat/tags/5.0.8/admin/view/wp-slimstat-db.php#L970 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2959452%40wp-slimstat&new=2959452%40wp-slimstat&sf
gins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2959452%40wp-slimstat&new=2959452%40wp-slimstat&sfp_email=&sfph_mail=
CVE ID: CVE-2023-4599 State: PUBLISHED Published: 2023-08-30T01:45:37.536Z Last Updated: 2025-02-05T19:34:47.929Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: ironikus Products: Email Encoder – Protect Email Addresses and Phone Numbers Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Slimstat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eeb_mailto' shortcode in versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with con
anitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e90f04e4-eb4c-4822-89c6-79f553987c37?source=cve - https://plugins.trac.wordpress.org/browser/email-encoder-bundle/tags/2.1.7/core/includes/classes/class-email-encoder-bundle-run.php#L529 - https://plugins.trac.wordpress.org/changeset/2958823/email-encoder-bundle#file60
CVE ID: CVE-2023-4600 State: PUBLISHED Published: 2023-08-30T11:29:28.920Z Last Updated: 2025-02-05T19:34:30.426Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: AffiliateWP Products: AffiliateWP Problem Types: CWE-862 Missing Authorization Description: The AffiliateWP for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'affwp_activate_addons_page_plugin' function called via an AJAX action in versions up to, and including, 2.14.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to activate arbitrary plugins. Additional Analyst Notes: - CVE Program Container: - C
subscriber-level access and above, to activate arbitrary plugins. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/eab422b8-8cf5-441e-a21f-6a0e1b7642b2?source=cve - https://affiliatewp.com/changelog/
CVE ID: CVE-2023-4601 State: PUBLISHED Published: 2023-10-18T19:15:33.759Z Last Updated: 2024-09-13T14:17:09.349Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: NI Products: System Configuration Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability exists in NI System Configuration that could result in information disclosure and/or arbitrary code execution. Successful exploitation requires that an attacker can provide a specially crafted response. This affects NI System Configuration 2023 Q3 and all previous versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ni.com/en/suppo
s. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ni.com/en/support/documentation/supplemental/23/stack-based-buffer-overflow-in-ni-system-configuration.html
CVE ID: CVE-2023-4602 State: PUBLISHED Published: 2023-11-15T12:44:53.283Z Last Updated: 2024-08-02T07:31:06.601Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: prasunsen Products: Namaste! LMS Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Namaste! LMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'course_id' parameter in versions up to, and including, 2.6.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully t
possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d014f512-9030-49ce-945d-4900594fb373?source=cve - https://drive.google.com/file/d/1wliD7YvLqL2xWnR6jLEnWgoWRKsv9dCI/view?usp=sharing - https://plugins.trac.wordpress.org/changeset/2966178/
CVE ID: CVE-2023-4603 State: PUBLISHED Published: 2023-11-13T22:32:14.996Z Last Updated: 2025-01-08T21:09:51.661Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: fmahmood Products: Star CloudPRNT for WooCommerce Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Star CloudPRNT for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'printersettings' parameter in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages
tion and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/110c6d41-e814-41c9-a3e7-d94ec3d953e6?source=cve - https://drive.google.com/file/d/1cRVH7Oz6M2U2XTbNAmm43PDKBw6FzShA/view?usp=sharing - https://plugins.trac.wordpress.org/changeset/2991002/star-cloudprnt-for-woocommerce/trunk?contextall=1&old=2510015&old_path=%2Fstar-cloudprnt-for-woocommerce%2Ftrunk
CVE ID: CVE-2023-4604 State: PUBLISHED Published: 2024-08-17T07:34:25.254Z Last Updated: 2024-08-19T13:47:07.515Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: 2j-slideshow Products: Slideshow, Image Slider by 2J Problem Types: CWE-79 Description: The Slideshow, Image Slider by 2J plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘post’ parameter in versions up to, and including, 1.3.54 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking
trary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d3a9a1f1-566f-478e-a0b7-857c12f21ff7?source=cve - https://wordpress.org/plugins/2j-slideshow/#developers
CVE ID: CVE-2023-4605 State: PUBLISHED Published: 2024-04-05T20:44:43.105Z Last Updated: 2024-08-12T18:32:28.134Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Lenovo Products: XClarity Administrator Problem Types: CWE-497 Description: A valid authenticated Lenovo XClarity Administrator (LXCA) user can potentially leverage an unauthenticated API endpoint to retrieve system event information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-136592
CVE ID: CVE-2023-4606 State: PUBLISHED Published: 2023-10-24T20:25:09.243Z Last Updated: 2024-09-11T18:24:50.644Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Lenovo Products: Lenovo XClarity Controller (XCC) Problem Types: CWE-862 Description: An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command. This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-140960
CVE ID: CVE-2023-4607 State: PUBLISHED Published: 2023-10-24T20:25:30.100Z Last Updated: 2024-12-03T14:39:50.517Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: Lenovo XClarity Controller (XCC) Problem Types: CWE-269 Description: An authenticated XCC user can change permissions for any user through a crafted API command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-140960
CVE ID: CVE-2023-4608 State: PUBLISHED Published: 2023-10-24T20:25:49.416Z Last Updated: 2024-09-11T20:38:29.704Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: Lenovo Products: Lenovo XClarity Controller (XCC) Problem Types: CWE-89 Description: An authenticated XCC user with elevated privileges can perform blind SQL injection in limited cases through a crafted API command. This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-140960
CVE ID: CVE-2023-4609 State: REJECTED Published: N/A Last Updated: 2023-08-30T01:14:18.182688Z Description: No description available.
CVE ID: CVE-2023-4610 State: REJECTED Published: N/A Last Updated: 2023-10-31T13:53:26.107Z Description: No description available.
CVE ID: CVE-2023-4611 State: PUBLISHED Published: 2023-08-29T21:25:53.315Z Last Updated: 2025-02-27T21:03:20.706Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a, Red Hat, Fedora Products: Kernel, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora Problem Types: CWE-416 Description: A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind() and VMA-locked page fault, and may allow a local attacker to crash the system or lead to a kernel information leak. Additional Analyst Notes: - CVE Program Conta
a local attacker to crash the system or lead to a kernel information leak. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-4611 - https://bugzilla.redhat.com/show_bug.cgi?id=2227244 - https://www.spinics.net/lists/stable-commits/msg310136.html
CVE ID: CVE-2023-4612 State: PUBLISHED Published: 2023-11-09T13:41:38.189Z Last Updated: 2025-02-26T21:25:31.425Z Vendors: Apereo Foundation Products: CAS Problem Types: CWE-302 Description: Improper Authentication vulnerability in Apereo CAS in jakarta.servlet.http.HttpServletRequest.getRemoteAddr method allows Multi-Factor Authentication bypass.This issue affects CAS: through 7.0.0-RC7. It is unknown whether in new versions the issue will be fixed. For the date of publication there is no patch, and the vendor does not treat it as a vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.pl/posts/2023/11/CVE-2023-4612/ - https://
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert.pl/posts/2023/11/CVE-2023-4612/ - https://cert.pl/en/posts/2023/11/CVE-2023-4612/
CVE ID: CVE-2023-4613 State: PUBLISHED Published: 2023-09-04T08:16:27.817Z Last Updated: 2024-09-30T18:50:46.494Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: LG Electronics Products: LG-LED Assistant Problem Types: CWE-22 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/settings/upload endpoint. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in th
er-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lgsecurity.lge.com/bulletins/idproducts#updateDetails - https://www.zerodayinitiative.com/advisories/ZDI-23-1221/
CVE ID: CVE-2023-4614 State: PUBLISHED Published: 2023-09-04T10:33:28.596Z Last Updated: 2024-09-30T18:50:07.356Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: LG Electronics Products: LG-LED Assistant Problem Types: CWE-22 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/installation/setThumbnailRc endpoint. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execut
tion of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lgsecurity.lge.com/bulletins/idproducts#updateDetails - https://www.zerodayinitiative.com/advisories/ZDI-23-1222/
CVE ID: CVE-2023-4615 State: PUBLISHED Published: 2023-09-04T10:39:30.389Z Last Updated: 2024-09-30T18:49:27.510Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: LG Electronics Products: LG-LED Assistant Problem Types: CWE-22 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/download/updateFile endpoint. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose i
of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information in the context of the current user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lgsecurity.lge.com/bulletins/idproducts#updateDetails - https://www.zerodayinitiative.com/advisories/ZDI-23-1224/
CVE ID: CVE-2023-4616 State: PUBLISHED Published: 2023-09-04T10:42:14.846Z Last Updated: 2024-09-30T18:48:13.074Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: LG Electronics Products: LG-LED Assistant Problem Types: CWE-22 Description: This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/thumbnail endpoint. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information
-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information in the context of the current user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lgsecurity.lge.com/bulletins/idproducts#updateDetails - https://www.zerodayinitiative.com/advisories/ZDI-23-1223/
CVE ID: CVE-2023-4617 State: PUBLISHED Published: 2024-12-19T09:39:31.393Z Last Updated: 2024-12-20T17:56:46.028Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H) Vendors: Govee Products: Govee Home Problem Types: CWE-863 Description: Incorrect authorization vulnerability in HTTP POST method in Govee Home application on Android and iOS allows remote attacker to control devices owned by other users via changing "device", "sku" and "type" fields' values. This issue affects Govee Home applications on Android and iOS in versions before 5.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2024/12/CVE-2023-4617/ - https://cert.pl/p
nalyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2024/12/CVE-2023-4617/ - https://cert.pl/posts/2024/12/CVE-2023-4617/ - https://play.google.com/store/apps/details?id=com.govee.home - https://apps.apple.com/us/app/govee-home/id1395696823
CVE ID: CVE-2023-4620 State: PUBLISHED Published: 2023-10-16T08:32:45.562Z Last Updated: 2025-05-02T17:39:12.953Z Vendors: Unknown Products: Booking Calendar Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Booking Calendar WordPress plugin before 9.7.3.1 does not sanitize and escape some of its booking from data, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against administrators Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/084e9494-2f9e-4420-9bf7-78a1a41433d7
CVE ID: CVE-2023-4621 State: REJECTED Published: N/A Last Updated: 2023-09-06T13:56:54.654Z Description: No description available.
CVE ID: CVE-2023-4622 State: PUBLISHED Published: 2023-09-06T13:56:56.355Z Last Updated: 2025-02-13T17:14:20.913Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Linux Products: Kernel Problem Types: CWE-416 Description: A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free. We recommend upgrading past commit 790c2f9
ly that is being released by garbage collection, resulting in use-after-free. We recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-6.1.y&id=790c2f9d15b594350ae9bca7b236f2b1859de02c - https://kernel.dance/790c2f9d15b594350ae9bca7b236f2b1859de02c - https://www.debian.org/security/2023/dsa-5492 - https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html - http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html - https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html