Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-38855

Опубликовано: 15 авг. 2023
Источник: debian
EPSS Низкий

Описание

Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the get_string function in xlstool.c:395.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
r-cran-readxlunfixedpackage

Примечания

  • https://github.com/libxls/libxls/issues/124 (#6)

  • Negligible security impact

EPSS

Процентиль: 57%
0.00874
Низкий

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 3 лет назад

Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the get_string function in xlstool.c:395.

redhat
около 3 лет назад

Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the get_string function in xlstool.c:395.

CVSS3: 6.5
nvd
около 3 лет назад

Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the get_string function in xlstool.c:395.

CVSS3: 6.5
github
около 3 лет назад

Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the get_string function in xlstool.c:395.

EPSS

Процентиль: 57%
0.00874
Низкий