deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-33089
Published: 2023-12-05
Description: Transient DOS when processing a NULL buffer while parsing WLAN vdev.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin
CVE: CVE-2023-33092
Published: 2023-12-05
Description: Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.
CVSS Score: 8.4 (HIGH)
CWE: CWE-120, CWE-119
References: https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin
CVE: CVE-2023-33097
Published: 2023-12-05
Description: Transient DOS in WLAN Firmware while processing a FTMR frame.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126, CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin
CVE: CVE-2023-33098
Published: 2023-12-05
Description: Transient DOS while parsing WPA IES, when it is passed with length more than expected size.
CVSS Score: 7.5 (HIGH)
CWE: CWE-126, CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin
CVE: CVE-2023-33106
Published: 2023-12-05
Description: Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
CVSS Score: 8.4 (HIGH)
CWE: CWE-823, CWE-119
References: https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-33106
CVE: CVE-2023-33107
Published: 2023-12-05
Description: Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
CVSS Score: 8.4 (HIGH)
CWE: CWE-190, CWE-190
References: https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-33107
CVE: CVE-2023-42556
Published: 2023-12-05
Description: Improper usage of implicit intent in Contacts prior to SMR Dec-2023 Release 1 allows attacker to get sensitive information.
CVSS Score: 3.3 (LOW)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE: CVE-2023-42557
Published: 2023-12-05
Description: Out-of-bound write vulnerability in libIfaaCa prior to SMR Dec-2023 Release 1 allows local system attackers to execute arbitrary code.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE: CVE-2023-42558
Published: 2023-12-05
Description: Out of bounds write vulnerability in HDCP in HAL prior to SMR Dec-2023 Release 1 allows attacker to perform code execution.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE: CVE-2023-42559
Published: 2023-12-05
Description: Improper exception management vulnerability in Knox Guard prior to SMR Dec-2023 Release 1 allows Knox Guard lock bypass via changing system time.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-755
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE: CVE-2023-42560
Published: 2023-12-05
Description: Heap out-of-bounds write vulnerability in dec_mono_audb of libsavsac.so prior to SMR Dec-2023 Release 1 allows an attacker to execute arbitrary code.
CVSS Score: 7.4 (HIGH)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE: CVE-2023-42561
Published: 2023-12-05
Description: Heap out-of-bounds write vulnerability in bootloader prior to SMR Dec-2023 Release 1 allows a physical attacker to execute arbitrary code.
CVSS Score: 7.1 (HIGH)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE: CVE-2023-42562
Published: 2023-12-05
Description: Integer overflow vulnerability in detectionFindFaceSupportMultiInstance of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-190
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE: CVE-2023-42563
Published: 2023-12-05
Description: Integer overflow vulnerability in landmarkCopyImageToNative of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-190
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE: CVE-2023-42564
Published: 2023-12-05
Description: Improper access control in knoxcustom service prior to SMR Dec-2023 Release 1 allows attacker to send broadcast with system privilege.
CVSS Score: 6.6 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE: CVE-2023-42565
Published: 2023-12-05
Description: Improper input validation vulnerability in Smart Clip prior to SMR Dec-2023 Release 1 allows local attackers with shell privilege to execute arbitrary code.
CVSS Score: 7.3 (HIGH)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE: CVE-2023-42566
Published: 2023-12-05
Description: Out-of-bound write vulnerability in libsavsvc prior to SMR Dec-2023 Release 1 allows local attackers to execute arbitrary code.
CVSS Score: 7.3 (HIGH)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE: CVE-2023-42567
Published: 2023-12-05
Description: Improper size check vulnerability in softsimd prior to SMR Dec-2023 Release 1 allows stack-based buffer overflow.
CVSS Score: 7.3 (HIGH)
CWE: CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE: CVE-2023-42568
Published: 2023-12-05
Description: Improper access control vulnerability in SmartManagerCN prior to SMR Dec-2023 Release 1 allows local attackers to access arbitrary files with system privilege.
CVSS Score: 7.3 (HIGH)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE: CVE-2023-42569
Published: 2023-12-05
Description: Improper authorization verification vulnerability in AR Emoji prior to SMR Dec-2023 Release 1 allows attackers to read sandbox data of AR Emoji.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-863
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE: CVE-2023-42570
Published: 2023-12-05
Description: Improper access control vulnerability in KnoxCustomManagerService prior to SMR Dec-2023 Release 1 allows attacker to access device SIM PIN.
CVSS Score: 5.9 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12
CVE: CVE-2023-42571
Published: 2023-12-05
Description: Abuse of remote unlock in Find My Mobile prior to version 7.3.13.4 allows physical attacker to unlock the device remotely by resetting the Samsung Account password with SMS verification when user lost the device.
CVSS Score: 7.6 (HIGH)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12; https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12
CVE: CVE-2023-42572
Published: 2023-12-05
Description: Implicit intent hijacking vulnerability in Samsung Account Web SDK prior to version 1.5.24 allows attacker to get sensitive information.
CVSS Score: 3.3 (LOW)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12; https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12
CVE: CVE-2023-42573
Published: 2023-12-05
Description: PendingIntent hijacking vulnerability in Search Widget prior to version 3.4 in China models allows local attackers to access data.
CVSS Score: 4.7 (MEDIUM)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12; https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12
CVE: CVE-2023-42574
Published: 2023-12-05
Description: Improper access control vulnerablility in GameHomeCN prior to version 4.2.60.2 allows local attackers to launch arbitrary activity in GameHomeCN.
CVSS Score: 5.1 (MEDIUM)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12; https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12
CVE: CVE-2023-42575
Published: 2023-12-05
Description: Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid flag setting.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-863
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12; https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12
CVE: CVE-2023-42576
Published: 2023-12-05
Description: Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid exception handler.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-287
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12; https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12
CVE: CVE-2023-42577
Published: 2023-12-05
Description: Improper Access Control in Samsung Voice Recorder prior to versions 21.4.15.01 in Android 12 and Android 13, 21.4.50.17 in Android 14 allows physical attackers to access Voice Recorder information on the lock screen.
CVSS Score: 6.8 (MEDIUM)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12; https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12
CVE: CVE-2023-42578
Published: 2023-12-05
Description: Improper handling of insufficient permissions or privileges vulnerability in Samsung Data Store prior to version 5.2.00.7 allows remote attackers to access location information without permission.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-755
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12; https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12
CVE: CVE-2023-42579
Published: 2023-12-05
Description: Improper usage of insecure protocol (i.e. HTTP) in SogouSDK of Chinese Samsung Keyboard prior to versions 5.3.70.1 in Android 11, 5.4.60.49, 5.4.85.5, 5.5.00.58 in Android 12, and 5.6.00.52, 5.6.10.42, 5.7.00.45 in Android 13 allows adjacent attackers to access keystroke data using Man-in-the-Middle attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-319
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12; https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12
CVE: CVE-2023-42580
Published: 2023-12-05
Description: Improper URL validation from MCSLaunch deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to install APK from Galaxy Store.
CVSS Score: 7.5 (HIGH)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12; https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12
CVE: CVE-2023-42581
Published: 2023-12-05
Description: Improper URL validation from InstantPlay deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to access data.
CVSS Score: 7.5 (HIGH)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12; https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12
CVE: CVE-2023-47304
Published: 2023-12-05
Description: An issue was discovered in Vonage Box Telephone Adapter VDV23 version VDV21-3.2.11-0.5.1, allows local attackers to bypass UART authentication controls and read/write arbitrary values to the memory of the device.
CVSS Score: 7.8 (HIGH)
CWE: CWE-287
References: https://trojanhorsey.substack.com/p/cve-2023-47304-unsecured-uart-in; https://trojanhorsey.substack.com/p/cve-2023-47304-unsecured-uart-in
CVE: CVE-2022-47531
Published: 2023-12-05
Description: An issue was discovered in Ericsson Evolved Packet Gateway (EPG) versions 3.x before 3.25 and 2.x before 2.16, allows authenticated users to bypass system CLI and execute commands they are authorized to execute directly in the UNIX shell.
CVSS Score: 8.8 (HIGH)
References: https://www.gruppotim.it/it/footer/red-team.html; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2023-37572
Published: 2023-12-05
Description: Softing OPC Suite version 5.25 and before has Incorrect Access Control, allows attackers to obtain sensitive information via weak permissions in OSF_discovery service. The service executable could be changed or the service could be deleted.
CVSS Score: 7.5 (HIGH)
CWE: CWE-276, CWE-276
References: https://industrial.softing.com/fileadmin/psirt/downloads/2023/syt-2023-5.html; https://industrial.softing.com/fileadmin/psirt/downloads/2023/syt-2023-5.html
CVE: CVE-2023-39248
Published: 2023-12-05
Description: 
Dell OS10 Networking Switches running 10.5.2.x and above contain an Uncontrolled Resource Consumption (Denial of Service) vulnerability, when switches are configured with VLT and VRRP. A remote unauthenticated user can cause the network to be flooded leading to Denial of Service for actual network users. This is a high severity vulnerability as it allows an attacker to cause an outage of network. Dell recommends customers to upgrade at the earliest opportunity.


CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://www.dell.com/support/kbdoc/en-us/000220138/dsa-2023-278-dell-networking-os10-security-updates-for-uncontrolled-resource-consumption; https://www.dell.com/support/kbdoc/en-us/000220138/dsa-2023-278-dell-networking-os10-security-updates-for-uncontrolled-resource-consumption
CVE: CVE-2023-44288
Published: 2023-12-05
Description: 
Dell PowerScale OneFS, 8.2.2.x through 9.6.0.x, contains an improper control of a resource through its lifetime vulnerability. An unauthenticated network attacker could potentially exploit this vulnerability, leading to denial of service.


CVSS Score: 7.5 (HIGH)
CWE: CWE-664
References: https://www.dell.com/support/kbdoc/en-us/000219932/dsa-2023-417-dell-powerscale-onefs-security-updates-for-multiple-security-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000219932/dsa-2023-417-dell-powerscale-onefs-security-updates-for-multiple-security-vulnerabilities
CVE: CVE-2023-44295
Published: 2023-12-05
Description: 
Dell PowerScale OneFS versions 8.2.2.x through 9.6.0.x contains an improper control of a resource through its lifetime vulnerability. A low privilege attacker could potentially exploit this vulnerability, leading to loss of information, and information disclosure.


CVSS Score: 6.3 (MEDIUM)
CWE: CWE-664
References: https://www.dell.com/support/kbdoc/en-us/000219932/dsa-2023-417-dell-powerscale-onefs-security-updates-for-multiple-security-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000219932/dsa-2023-417-dell-powerscale-onefs-security-updates-for-multiple-security-vulnerabilities
CVE: CVE-2023-43472
Published: 2023-12-05
Description: An issue in MLFlow versions 2.8.1 and before allows a remote attacker to obtain sensitive information via a crafted request to REST API.
CVSS Score: 7.5 (HIGH)
References: https://www.contrastsecurity.com/security-influencers/discovering-mlflow-framework-zero-day-vulnerability-machine-language-model-security-contrast-security; https://www.contrastsecurity.com/security-influencers/discovering-mlflow-framework-zero-day-vulnerability-machine-language-model-security-contrast-security
CVE: CVE-2023-49070
Published: 2023-12-05
Description: Pre-auth RCE in Apache Ofbiz 18.12.09.

It's due to XML-RPC no longer maintained still present.
This issue affects Apache OFBiz: before 18.12.10. 
Users are recommended to upgrade to version 18.12.10
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://packetstormsecurity.com/files/176323/Apache-OFBiz-18.12.09-Remote-Code-Execution.html; https://issues.apache.org/jira/browse/OFBIZ-12812; https://lists.apache.org/thread/jmbqk2lp4t4483whzndp5xqlq4f3otg3
CVE: CVE-2023-5188
Published: 2023-12-05
Description: The MMS Interpreter of WagoAppRTU in versions below 1.4.6.0 which is used by the WAGO Telecontrol Configurator is vulnerable to malformed packets. An remote unauthenticated attacker could send specifically crafted packets that lead to a denial-of-service condition until restart of the affected device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://cert.vde.com/en/advisories/VDE-2023-044/; https://cert.vde.com/en/advisories/VDE-2023-044/
CVE: CVE-2023-6269
Published: 2023-12-05
Description: An argument injection vulnerability has been identified in the 
administrative web interface of the Atos Unify OpenScape products "Session Border Controller" (SBC) and "Branch", before version V10 R3.4.0, and OpenScape "BCF" before versions V10R10.12.00 and V10R11.05.02. This allows an 
unauthenticated attacker to gain root access to the appliance via SSH (scope change) and also bypass authentication for the administrative interface and gain
 access as an arbitrary (administrative) user.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-88, CWE-88
References: http://packetstormsecurity.com/files/176194/Atos-Unify-OpenScape-Authentication-Bypass-Remote-Code-Execution.html; http://seclists.org/fulldisclosure/2023/Dec/16; https://networks.unify.com/security/advisories/OBSO-2310-01.pdf
CVE: CVE-2023-41835
Published: 2023-12-05
Description: When a Multipart request is performed but some of the fields exceed the maxStringLength  limit, the upload files will remain in struts.multipart.saveDir  even if the request has been denied.
Users are recommended to upgrade to versions Struts 2.5.32 or 6.1.2.2 or Struts 6.3.0.1 or greater, which fixe this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-459, CWE-459
References: https://lists.apache.org/thread/6wj530kh3ono8phr642y9sqkl67ys2ft; https://www.openwall.com/lists/oss-security/2023/12/09/1; https://lists.apache.org/thread/6wj530kh3ono8phr642y9sqkl67ys2ft
CVE: CVE-2023-43608
Published: 2023-12-05
Description: A data integrity vulnerability exists in the BR_NO_CHECK_HASH_FOR functionality of Buildroot 2023.08.1 and dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.
CVSS Score: 8.1 (HIGH)
CWE: CWE-494, CWE-494
References: http://www.openwall.com/lists/oss-security/2023/12/11/1; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1845; http://www.openwall.com/lists/oss-security/2023/12/11/1
CVE: CVE-2023-43628
Published: 2023-12-05
Description: An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1~dev. A specially crafted network packet can lead to memory corruption. An attacker can send a malicious packet to trigger this vulnerability.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-191, CWE-191
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1860; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1860; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1860
CVE: CVE-2023-45838
Published: 2023-12-05
Description: Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the `aufs` package.
CVSS Score: 8.1 (HIGH)
CWE: CWE-494, CWE-494
References: http://www.openwall.com/lists/oss-security/2023/12/11/1; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1844; http://www.openwall.com/lists/oss-security/2023/12/11/1
CVE: CVE-2023-45839
Published: 2023-12-05
Description: Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the `aufs-util` package.
CVSS Score: 8.1 (HIGH)
CWE: CWE-494, CWE-494
References: http://www.openwall.com/lists/oss-security/2023/12/11/1; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1844; http://www.openwall.com/lists/oss-security/2023/12/11/1
CVE: CVE-2023-45840
Published: 2023-12-05
Description: Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the `riscv64-elf-toolchain` package.
CVSS Score: 8.1 (HIGH)
CWE: CWE-494, CWE-494
References: http://www.openwall.com/lists/oss-security/2023/12/11/1; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1844; http://www.openwall.com/lists/oss-security/2023/12/11/1
CVE: CVE-2023-45841
Published: 2023-12-05
Description: Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the `versal-firmware` package.
CVSS Score: 8.1 (HIGH)
CWE: CWE-494, CWE-494
References: http://www.openwall.com/lists/oss-security/2023/12/11/1; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1844; http://www.openwall.com/lists/oss-security/2023/12/11/1
CVE: CVE-2023-45842
Published: 2023-12-05
Description: Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the `mxsldr` package.
CVSS Score: 8.1 (HIGH)
CWE: CWE-494, CWE-494
References: http://www.openwall.com/lists/oss-security/2023/12/11/1; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1844; http://www.openwall.com/lists/oss-security/2023/12/11/1
CVE: CVE-2022-24403
Published: 2023-12-05
Description: The TETRA TA61 identity encryption function internally uses a 64-bit value derived exclusively from the SCK (Class 2 networks) or CCK (Class 3 networks). The structure of TA61 allows for efficient recovery of this 64-bit value, allowing an adversary to encrypt or decrypt arbitrary identities given only three known encrypted/unencrypted identity pairs.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-327, CWE-327
References: https://tetraburst.com/; https://tetraburst.com/