CVE-2023-23108

Опубликовано: 27 фев. 2023

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a NULL pointer dereference in the function Xasc.

Ссылки

https://github.com/WhatTheFuzz/crasm-fuzz/tree/a020ad6ad99a72ca373f7dd1aab3a61a7c87fd66/bug-null-pointer
Exploit
Third Party Advisory
https://github.com/colinbourassa/crasm/pull/7
Patch
Third Party Advisory
https://github.com/WhatTheFuzz/crasm-fuzz/tree/a020ad6ad99a72ca373f7dd1aab3a61a7c87fd66/bug-null-pointer
Exploit
Third Party Advisory
https://github.com/colinbourassa/crasm/pull/7
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:crasm_project:crasm:*:*:*:*:*:*:*:*

Версия до 1.11 (исключая)

EPSS

Процентиль: 37%

0.00155

Низкий

7.5 High

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVE-2023-23108

CVSS3: 7.5

ubuntu

почти 3 года назад

In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a NULL pointer dereference in the function Xasc.

CVE-2023-23108

CVSS3: 7.5

debian

почти 3 года назад

In crasm 1.8-3, invalid input validation, specific files passed to the ...

GHSA-c924-38p9-78hh

CVSS3: 7.5

github

почти 3 года назад

In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a NULL pointer dereference in the function Xasc.

EPSS

Процентиль: 37%

0.00155

Низкий

7.5 High

CVSS3

Дефекты

CWE-476