CVE-2023-38853

Опубликовано: 15 авг. 2023

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the xls_parseWorkBook function in xls.c:1015.

Ссылки

https://github.com/libxls/libxls/issues/124
Exploit
Issue Tracking
https://github.com/libxls/libxls/issues/124
Exploit
Issue Tracking

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libxls_project:libxls:1.6.2:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00754

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVE-2023-38853

CVSS3: 6.5

ubuntu

больше 2 лет назад

Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the xls_parseWorkBook function in xls.c:1015.

CVE-2023-38853

redhat

больше 2 лет назад

Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the xls_parseWorkBook function in xls.c:1015.

CVE-2023-38853

CVSS3: 6.5

debian

больше 2 лет назад

Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacke ...

GHSA-8x4f-p6m3-p75v

CVSS3: 6.5

github

больше 2 лет назад

Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the xls_parseWorkBook function in xls.c:1015.

EPSS

Процентиль: 73%

0.00754

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-787