CVE-2023-0083

Опубликовано: 10 мар. 2023

Источник: nvd

CVSS3: 4

CVSS3: 5.5

EPSS Низкий

Описание

The ArKUI framework subsystem within OpenHarmony-v3.1.5 and prior versions,

OpenHarmony-v3.0.7 and prior versions

has an Improper Input Validation vulnerability which local attackers can exploit this vulnerability to send malicious data, causing the current application to crash.

Ссылки

https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md
Third Party Advisory
https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-02.md
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:openatom:openharmony:*:*:*:*:lts:*:*:*

Версия от 3.0 (включая) до 3.0.7 (включая)

cpe:2.3:o:openatom:openharmony:*:*:*:*:-:*:*:*

Версия от 3.1 (включая) до 3.1.5 (включая)

EPSS

Процентиль: 7%

0.00026

Низкий

4 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-843

Связанные уязвимости

GHSA-whc8-x8vc-w8v2

CVSS3: 5.5

github

почти 3 года назад

The ArKUI framework subsystem within OpenHarmony-v3.1.5 and prior versions, OpenHarmony-v3.0.7 and prior versions has an Improper Input Validation vulnerability which local attackers can exploit this vulnerability to send malicious data, causing the current application to crash.

EPSS

Процентиль: 7%

0.00026

Низкий

4 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-843