Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-25543 State: PUBLISHED Published: 2024-02-06T06:31:20.673Z Last Updated: 2024-08-02T11:25:19.264Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell Power Manager (DPM) Problem Types: CWE-280 Description: Dell Power Manager, versions prior to 3.14, contain an Improper Authorization vulnerability in DPM service. A low privileged malicious user could potentially exploit this vulnerability in order to elevate privileges on the system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000209464/dsa-2023-075
CVE ID: CVE-2023-25544 State: PUBLISHED Published: 2023-03-01T14:26:43.920Z Last Updated: 2025-03-07T18:57:11.711Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: Dell NetWorker, NVE Problem Types: CWE-200 Description: Dell NetWorker versions 19.5 and earlier contain 'Apache Tomcat' version disclosure vulnerability. A NetWorker server user with remote access to NetWorker clients may potentially exploit this vulnerability and may launch target-specific attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000210471/dsa-2023-058-dell-networker-security-update-for
chment: References: - https://www.dell.com/support/kbdoc/en-us/000210471/dsa-2023-058-dell-networker-security-update-for-version-disclosure-vulnerability
CVE ID: CVE-2023-25545 State: PUBLISHED Published: 2023-05-10T13:17:04.014Z Last Updated: 2025-01-27T18:03:29.847Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Server Board BMC firmware Problem Types: escalation of privilege, CWE-92 Description: Improper buffer restrictions in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00839.html
CVE ID: CVE-2023-25546 State: PUBLISHED Published: 2024-09-16T16:38:46.916Z Last Updated: 2025-11-03T21:47:25.679Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L) Vendors: n/a Products: UEFI firmware for some Intel(R) Processors Problem Types: denial of service, CWE-125 Description: Out-of-bounds read in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01071.html
CVE ID: CVE-2023-25547 State: PUBLISHED Published: 2023-04-18T20:31:35.199Z Last Updated: 2025-02-12T16:00:20.177Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: StruxureWare Data Center Expert Problem Types: CWE-863 Description: A CWE-863: Incorrect Authorization vulnerability exists that could allow remote code execution on upload and install packages when a hacker is using a low privileged user account. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-04
m Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf
CVE ID: CVE-2023-25548 State: PUBLISHED Published: 2023-04-18T20:32:42.718Z Last Updated: 2025-03-03T19:17:53.318Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: StruxureWare Data Center Expert Problem Types: CWE-863 Description: A CWE-863: Incorrect Authorization vulnerability exists that could allow access to device credentials on specific DCE endpoints not being properly secured when a hacker is using a low privileged user. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf
CVE ID: CVE-2023-25549 State: PUBLISHED Published: 2023-04-18T20:35:42.008Z Last Updated: 2025-03-03T19:14:28.433Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: StruxureWare Data Center Expert Problem Types: CWE-94 Description: A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows for remote code execution when using a parameter of the DCE network settings endpoint. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-
Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf
CVE ID: CVE-2023-25550 State: PUBLISHED Published: 2023-04-18T20:36:30.681Z Last Updated: 2025-02-12T16:00:58.860Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: StruxureWare Data Center Expert Problem Types: CWE-94 Description: A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows remote code execution via the “hostname” parameter when maliciously crafted hostname syntax is entered. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/file
lyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf
CVE ID: CVE-2023-25551 State: PUBLISHED Published: 2023-04-18T20:37:23.329Z Last Updated: 2025-02-12T16:01:18.080Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: Schneider Electric Products: StruxureWare Data Center Expert Problem Types: CWE-79 Description: A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists on a DCE file upload endpoint when tampering with parameters over HTTP. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEV
VE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf
CVE ID: CVE-2023-25552 State: PUBLISHED Published: 2023-04-18T20:33:50.548Z Last Updated: 2025-03-03T19:16:53.079Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Schneider Electric Products: StruxureWare Data Center Expert Problem Types: CWE-862 Description: A CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized content, changes or deleting of content, or performing unauthorized functions when tampering the Device File Transfer settings on DCE endpoints. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://
rt (V7.9.2 and prior) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf
CVE ID: CVE-2023-25553 State: PUBLISHED Published: 2023-04-18T20:38:01.298Z Last Updated: 2025-02-05T21:24:51.230Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: Schneider Electric Products: StruxureWare Data Center Expert Problem Types: CWE-79 Description: A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists on a DCE endpoint through the logging capabilities of the webserver. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2
CVE ID: CVE-2023-25554 State: PUBLISHED Published: 2023-04-18T20:34:40.438Z Last Updated: 2025-02-12T16:00:38.815Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: StruxureWare Data Center Expert Problem Types: CWE-78 Description: A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that allows a local privilege escalation on the appliance when a maliciously crafted Operating System command is entered on the device. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refer
Data Center Expert (V7.9.2 and prior) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf
CVE ID: CVE-2023-25555 State: PUBLISHED Published: 2023-04-18T20:39:14.874Z Last Updated: 2025-02-05T21:39:36.172Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Schneider Electric Products: StruxureWare Data Center Expert Problem Types: CWE-78 Description: A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow a user that knows the credentials to execute unprivileged shell commands on the appliance over SSH. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://
CVE ID: CVE-2023-25556 State: PUBLISHED Published: 2023-04-18T17:03:07.661Z Last Updated: 2025-02-05T21:15:50.417Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H) Vendors: Schneider Electric Products: Merten INSTABUS Tastermodul 1fach System M 625199, Merten INSTABUS Tastermodul 2fach System M 625299, Merten Tasterschnittstelle 4fach plus 670804, Merten KNX ARGUS 180/2,20M UP SYSTEM 631725, Merten Jalousie-/Schaltaktor REG-K/8x/16x/10 m. HB 649908, Merten KNX Uni-Dimmaktor LL REG-K/2x230/300 W MEG6710-0002, Merten KNX Schaltakt.2x6A UP m.2 Eing. MEG6003-0002 Problem Types: CWE-287 Description: A CWE-287: Improper Authentication vulnerability exists that could allow a d
03-0002 Problem Types: CWE-287 Description: A CWE-287: Improper Authentication vulnerability exists that could allow a device to be compromised when a key of less than seven digits is entered and the attacker has access to the KNX installation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-03.pdf
CVE ID: CVE-2023-25557 State: PUBLISHED Published: 2023-02-10T22:03:09.214Z Last Updated: 2025-03-10T21:13:15.915Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: datahub-project Products: datahub Problem Types: CWE-918 Description: DataHub is an open-source metadata platform. The DataHub frontend acts as a proxy able to forward any REST or GraphQL requests to the backend. The goal of this proxy is to perform authentication if needed and forward HTTP requests to the DataHub Metadata Store (GMS). It has been discovered that the proxy does not adequately construct the URL when forwarding data to GMS, allowing external users to reroute requests from the DataHub F
adequately construct the URL when forwarding data to GMS, allowing external users to reroute requests from the DataHub Frontend to any arbitrary hosts. As a result attackers may be able to reroute a request from originating from the frontend proxy to any other server and return the result. This vulnerability was discovered and reported by the GitHub Security lab and is tracked as GHSL-2022-076. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/datahub-project/datahub/security/advisories/GHSA-5w2h-q83m-65xg
CVE ID: CVE-2023-25558 State: PUBLISHED Published: 2023-02-10T22:03:07.330Z Last Updated: 2025-03-10T21:13:21.664Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: datahub-project Products: datahub Problem Types: CWE-502 Description: DataHub is an open-source metadata platform. When the DataHub frontend is configured to authenticate via SSO, it will leverage the pac4j library. The processing of the `id_token` is done in an unsafe manner which is not properly accounted for by the DataHub frontend. Specifically, if any of the id_token claims value start with the {#sb64} prefix, pac4j considers the value to be a serialized Java object and will deserialize it. This
ue start with the {#sb64} prefix, pac4j considers the value to be a serialized Java object and will deserialize it. This issue may lead to Remote Code Execution (RCE) in the worst case. Although a `RestrictedObjectInputStream` is in place, that puts some restriction on what classes can be deserialized, it still allows a broad range of java packages and potentially exploitable with different gadget chains. Users are advised to upgrade. There are no known workarounds. This vulnerability was discovered and reported by the GitHub Security lab and is tracked as GHSL-2022-086. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/datahub-proje
ditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/datahub-project/datahub/security/advisories/GHSA-hrwp-2q5c-86wv - https://github.com/datahub-project/datahub/commit/2a182f484677d056730d6b4e9f0143e67368359f
CVE ID: CVE-2023-25559 State: PUBLISHED Published: 2023-02-10T22:03:05.646Z Last Updated: 2025-03-10T21:13:27.374Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: datahub-project Products: datahub Problem Types: CWE-287 Description: DataHub is an open-source metadata platform. When not using authentication for the metadata service, which is the default configuration, the Metadata service (GMS) will use the X-DataHub-Actor HTTP header to infer the user the frontend is sending the request on behalf of. When the backends retrieves the header, its name is retrieved in a case-insensitive way. This case differential can be abused by an attacker to smuggle an X-DataH
s name is retrieved in a case-insensitive way. This case differential can be abused by an attacker to smuggle an X-DataHub-Actor header with different casing (eg: X-DATAHUB-ACTOR). This issue may lead to an authorization bypass by allowing any user to impersonate the system user account and perform any actions on its behalf. This vulnerability was discovered and reported by the GitHub Security lab and is tracked as GHSL-2022-079. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/datahub-project/datahub/security/advisories/GHSA-qgp2-qr66-j8r8
CVE ID: CVE-2023-25560 State: PUBLISHED Published: 2023-02-10T22:03:03.926Z Last Updated: 2025-03-10T21:13:33.582Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: datahub-project Products: datahub Problem Types: CWE-913 Description: DataHub is an open-source metadata platform. The AuthServiceClient which is responsible for creation of new accounts, verifying credentials, resetting them or requesting access tokens, crafts multiple JSON strings using format strings with user-controlled data. This means that an attacker may be able to augment these JSON strings to be sent to the backend and that can potentially be abused by including new or colliding values. This
ese JSON strings to be sent to the backend and that can potentially be abused by including new or colliding values. This issue may lead to an authentication bypass and the creation of system accounts, which effectively can lead to full system compromise. Users are advised to upgrade. There are no known workarounds for this vulnerability. This vulnerability was discovered and reported by the GitHub Security lab and is tracked as GHSL-2022-080. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/datahub-project/datahub/security/advisories/GHSA-6rpf-5cfg-h8f3
CVE ID: CVE-2023-25561 State: PUBLISHED Published: 2023-02-10T22:03:02.527Z Last Updated: 2025-03-10T21:13:40.029Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: datahub-project Products: datahub Problem Types: CWE-755 Description: DataHub is an open-source metadata platform. In the event a system is using Java Authentication and Authorization Service (JAAS) authentication and that system is given a configuration which contains an error, the authentication for the system will fail open and allow an attacker to login using any username and password. The reason for this is that while an error is thrown in the `authenticateJaasUser` method it is swallowed with
password. The reason for this is that while an error is thrown in the `authenticateJaasUser` method it is swallowed without propagating the error. As a result of this issue unauthenticated users may gain access to the system. Users are advised to upgrade. There are no known workarounds for this issue. This vulnerability was discovered and reported by the GitHub Security lab and is tracked as GHSL-2022-081. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/datahub-project/datahub/security/advisories/GHSA-7wc6-p6c4-522c - https://github.com/datahub-project/datahub/blob/fdf4e48495f083314f59c414bcc7c2601633a2b8/datahub-frontend/app/secur
2c - https://github.com/datahub-project/datahub/blob/fdf4e48495f083314f59c414bcc7c2601633a2b8/datahub-frontend/app/security/AuthenticationManager.java#L26
CVE ID: CVE-2023-25562 State: PUBLISHED Published: 2023-02-10T22:03:00.889Z Last Updated: 2025-03-10T21:13:45.824Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N) Vendors: datahub-project Products: datahub Problem Types: CWE-613 Description: DataHub is an open-source metadata platform. In versions of DataHub prior to 0.8.45 Session cookies are only cleared on new sign-in events and not on logout events. Any authentication checks using the `AuthUtils.hasValidSessionCookie()` method could be bypassed by using a cookie from a logged out session, as a result any logged out session cookie may be accepted as valid and therefore lead to an authentication bypass to the syste
esult any logged out session cookie may be accepted as valid and therefore lead to an authentication bypass to the system. Users are advised to upgrade. There are no known workarounds for this issue. This vulnerability was discovered and reported by the GitHub Security lab and is tracked as GHSL-2022-083. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/datahub-project/datahub/security/advisories/GHSA-3974-hxjh-m3jj - https://github.com/datahub-project/datahub/blob/aa146db611e3a4ca3aa17bb740783f789d4444d3/datahub-frontend/app/auth/AuthUtils.java#L78
CVE ID: CVE-2023-25563 State: PUBLISHED Published: 2023-02-14T17:35:08.172Z Last Updated: 2025-03-10T21:12:07.826Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: gssapi Products: gss-ntlmssp Problem Types: CWE-125 Description: GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, multiple out-of-bounds reads when decoding NTLM fields can trigger a denial of service. A 32-bit integer overflow condition can lead to incorrect checks of consistency of length of internal buffers. Although most applications will error out before accepting a singe input buffer of 4GB in length this could theoretically
though most applications will error out before accepting a singe input buffer of 4GB in length this could theoretically happen. This vulnerability can be triggered via the main `gss_accept_sec_context` entry point if the application allows tokens greater than 4GB in length. This can lead to a large, up to 65KB, out-of-bounds read which could cause a denial-of-service if it reads from unmapped memory. Version 1.2.0 contains a patch for the out-of-bounds reads. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gssapi/gss-ntlmssp/security/advisories/GHSA-jjjx-5qf7-9mgf - https://github.com/gssapi/gss-ntlmssp/commit/97c62c6167299028d8076
gss-ntlmssp/security/advisories/GHSA-jjjx-5qf7-9mgf - https://github.com/gssapi/gss-ntlmssp/commit/97c62c6167299028d80765080e74d91dfc99efbd - https://github.com/gssapi/gss-ntlmssp/releases/tag/v1.2.0
CVE ID: CVE-2023-25564 State: PUBLISHED Published: 2023-02-14T17:35:26.294Z Last Updated: 2025-03-10T21:12:01.901Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: gssapi Products: gss-ntlmssp Problem Types: CWE-787 Description: GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, memory corruption can be triggered when decoding UTF16 strings. The variable `outlen` was not initialized and could cause writing a zero to an arbitrary place in memory if `ntlm_str_convert()` were to fail, which would leave `outlen` uninitialized. This can lead to a denial of service if the write hits unmapped memory o
fail, which would leave `outlen` uninitialized. This can lead to a denial of service if the write hits unmapped memory or randomly corrupts a byte in the application memory space. This vulnerability can trigger an out-of-bounds write, leading to memory corruption. This vulnerability can be triggered via the main `gss_accept_sec_context` entry point. This issue is fixed in version 1.2.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gssapi/gss-ntlmssp/security/advisories/GHSA-r85x-q5px-9xfq - https://github.com/gssapi/gss-ntlmssp/commit/c753000eb31835c0664e528fbc99378ae0cbe950 - https://github.com/gssapi/gss-ntlmssp/releases/tag/v
ssapi/gss-ntlmssp/commit/c753000eb31835c0664e528fbc99378ae0cbe950 - https://github.com/gssapi/gss-ntlmssp/releases/tag/v1.2.0
CVE ID: CVE-2023-25565 State: PUBLISHED Published: 2023-02-14T17:35:41.222Z Last Updated: 2025-03-10T21:11:55.214Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: gssapi Products: gss-ntlmssp Problem Types: CWE-590 Description: GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, an incorrect free when decoding target information can trigger a denial of service. The error condition incorrectly assumes the `cb` and `sh` buffers contain a copy of the data that needs to be freed. However, that is not the case. This vulnerability can be triggered via the main `gss_accept_sec_context` entry point. This