CVE-2023-33980

Опубликовано: 24 мая 2023

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Bramble Synchronisation Protocol (BSP) in Briar before 1.4.22 allows attackers to cause a denial of service (repeated application crashes) via a series of long messages to a contact.

Ссылки

https://briarproject.org/news/2023-three-security-issues-found-and-fixed/
Vendor Advisory
https://ethz.ch/content/dam/ethz/special-interest/infk/inst-infsec/appliedcrypto/education/theses/report_YuanmingSong.pdf
Exploit
Technical Description
Third Party Advisory
https://briarproject.org/news/2023-three-security-issues-found-and-fixed/
Vendor Advisory
https://ethz.ch/content/dam/ethz/special-interest/infk/inst-infsec/appliedcrypto/education/theses/report_YuanmingSong.pdf
Exploit
Technical Description
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:briarproject:briar:*:*:*:*:*:*:*:*

Версия до 1.4.22 (исключая)

EPSS

Процентиль: 37%

0.0016

Низкий

7.5 High

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVE-2023-33980

CVSS3: 7.5

debian

больше 2 лет назад

Bramble Synchronisation Protocol (BSP) in Briar before 1.4.22 allows a ...

GHSA-rv6q-435f-w46h

CVSS3: 7.5

github

больше 2 лет назад

Bramble Synchronisation Protocol (BSP) in Briar before 1.4.22 allows attackers to cause a denial of service (repeated application crashes) via a series of long messages to a contact.

EPSS

Процентиль: 37%

0.0016

Низкий

7.5 High

CVSS3

Дефекты

CWE-400