CWE-131
Incorrect Calculation of Buffer Size
The product does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow.
CVE-2023-1175 (GCVE-0-2023-1175)
Vulnerability from cvelistv5 – Published: 2023-03-04 00:00 – Updated: 2025-11-03 20:35
VLAI
Title
Incorrect Calculation of Buffer Size in vim/vim
Summary
Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.
Severity
7.3 (High)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-131 - Incorrect Calculation of Buffer Size
Assigner
References
7 references
Impacted products
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2025-11-03T20:35:17.121Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://huntr.dev/bounties/7e93fc17-92eb-4ae7-b01a-93bb460b643e"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/vim/vim/commit/c99cbf8f289bdda5d4a77d7ec415850a520330ba"
},
{
"name": "FEDORA-2023-43cb13aefb",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/"
},
{
"name": "FEDORA-2023-d4ebe53978",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/"
},
{
"name": "FEDORA-2023-030318ca00",
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/"
},
{
"name": "[debian-lts-announce] 20230612 [SECURITY] [DLA 3453-1] vim security update",
"tags": [
"mailing-list",
"x_transferred"
],
"url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00015.html"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-1175",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-03-06T16:30:55.632222Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-03-06T16:31:32.083Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "vim/vim",
"vendor": "vim",
"versions": [
{
"lessThan": "9.0.1378",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378."
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-131",
"description": "CWE-131 Incorrect Calculation of Buffer Size",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-06-12T00:00:00.000Z",
"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"shortName": "@huntrdev"
},
"references": [
{
"url": "https://huntr.dev/bounties/7e93fc17-92eb-4ae7-b01a-93bb460b643e"
},
{
"url": "https://github.com/vim/vim/commit/c99cbf8f289bdda5d4a77d7ec415850a520330ba"
},
{
"name": "FEDORA-2023-43cb13aefb",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DIAKPMKJ4OZ6NYRZJO7YWMNQL2BICLYV/"
},
{
"name": "FEDORA-2023-d4ebe53978",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4KDAU76Z7QNSPKZX2JAJ6O7KIEOXWTL/"
},
{
"name": "FEDORA-2023-030318ca00",
"tags": [
"vendor-advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IE44W6WMMREYCW3GJHPSYP7NK2VT5NY6/"
},
{
"name": "[debian-lts-announce] 20230612 [SECURITY] [DLA 3453-1] vim security update",
"tags": [
"mailing-list"
],
"url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00015.html"
}
],
"source": {
"advisory": "7e93fc17-92eb-4ae7-b01a-93bb460b643e",
"discovery": "EXTERNAL"
},
"title": "Incorrect Calculation of Buffer Size in vim/vim"
}
},
"cveMetadata": {
"assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a",
"assignerShortName": "@huntrdev",
"cveId": "CVE-2023-1175",
"datePublished": "2023-03-04T00:00:00.000Z",
"dateReserved": "2023-03-04T00:00:00.000Z",
"dateUpdated": "2025-11-03T20:35:17.121Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2023-24819 (GCVE-0-2023-24819)
Vulnerability from cvelistv5 – Published: 2023-04-24 14:42 – Updated: 2025-02-04 19:10
VLAI
Title
RIOT-OS vulnerable to Buffer Overflow during IPHC receive
Summary
RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in an out of bounds write in the packet buffer. The overflow can be used to corrupt other packets and the allocator metadata. Corrupting a pointer will easily lead to denial of service. While carefully manipulating the allocator metadata gives an attacker the possibility to write data to arbitrary locations and thus execute arbitrary code. Version 2022.10 fixes this issue. As a workaround, disable support for fragmented IP datagrams or apply the patches manually.
Severity
9.8 (Critical)
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/RIOT-OS/RIOT/security/advisori… | x_refsource_CONFIRM |
| https://github.com/RIOT-OS/RIOT/pull/18817/commit… | x_refsource_MISC |
| https://github.com/RIOT-OS/RIOT/pull/18820/commit… | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T11:03:19.389Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-fv97-2448-gcf6",
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-fv97-2448-gcf6"
},
{
"name": "https://github.com/RIOT-OS/RIOT/pull/18817/commits/73615161c01fcfbbc7216cf502cabb12c1598ee4",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/RIOT-OS/RIOT/pull/18817/commits/73615161c01fcfbbc7216cf502cabb12c1598ee4"
},
{
"name": "https://github.com/RIOT-OS/RIOT/pull/18820/commits/da63e45ee94c03a2e08625b04ea618653eab4a9f",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/RIOT-OS/RIOT/pull/18820/commits/da63e45ee94c03a2e08625b04ea618653eab4a9f"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-24819",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-02-04T19:10:43.473108Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-02-04T19:10:58.343Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-fv97-2448-gcf6"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "RIOT",
"vendor": "RIOT-OS",
"versions": [
{
"status": "affected",
"version": "\u003c 2022.10"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in an out of bounds write in the packet buffer. The overflow can be used to corrupt other packets and the allocator metadata. Corrupting a pointer will easily lead to denial of service. While carefully manipulating the allocator metadata gives an attacker the possibility to write data to arbitrary locations and thus execute arbitrary code. Version 2022.10 fixes this issue. As a workaround, disable support for fragmented IP datagrams or apply the patches manually."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-131",
"description": "CWE-131: Incorrect Calculation of Buffer Size",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787: Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-04-24T14:42:44.016Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-fv97-2448-gcf6",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-fv97-2448-gcf6"
},
{
"name": "https://github.com/RIOT-OS/RIOT/pull/18817/commits/73615161c01fcfbbc7216cf502cabb12c1598ee4",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/RIOT-OS/RIOT/pull/18817/commits/73615161c01fcfbbc7216cf502cabb12c1598ee4"
},
{
"name": "https://github.com/RIOT-OS/RIOT/pull/18820/commits/da63e45ee94c03a2e08625b04ea618653eab4a9f",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/RIOT-OS/RIOT/pull/18820/commits/da63e45ee94c03a2e08625b04ea618653eab4a9f"
}
],
"source": {
"advisory": "GHSA-fv97-2448-gcf6",
"discovery": "UNKNOWN"
},
"title": "RIOT-OS vulnerable to Buffer Overflow during IPHC receive"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2023-24819",
"datePublished": "2023-04-24T14:42:44.016Z",
"dateReserved": "2023-01-30T14:43:33.705Z",
"dateUpdated": "2025-02-04T19:10:58.343Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-30575 (GCVE-0-2023-30575)
Vulnerability from cvelistv5 – Published: 2023-06-07 08:06 – Updated: 2024-10-10 14:39
VLAI
Title
Apache Guacamole: Incorrect calculation of Guacamole protocol element lengths
Summary
Apache Guacamole 1.5.1 and older may incorrectly calculate the lengths of instruction elements sent during the Guacamole protocol handshake, potentially allowing an attacker to inject Guacamole instructions during the handshake through specially-crafted data.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-131 - Incorrect Calculation of Buffer Size
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://lists.apache.org/thread/tn63n2lon0h5p45of… | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Apache Software Foundation | Apache Guacamole |
Affected:
0 , ≤ 1.5.1
(semver)
|
Credits
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T14:28:51.955Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://lists.apache.org/thread/tn63n2lon0h5p45oft834t1dqvvxownv"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-30575",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-10-10T14:39:18.400824Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-10-10T14:39:33.936Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Apache Guacamole",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThanOrEqual": "1.5.1",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Stefan Schiller (Sonar)"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Apache Guacamole 1.5.1 and older may incorrectly calculate the lengths of instruction elements sent during the Guacamole protocol handshake, potentially allowing an attacker to inject Guacamole instructions during the handshake through specially-crafted data.\u003cbr\u003e\u003cbr\u003e"
}
],
"value": "Apache Guacamole 1.5.1 and older may incorrectly calculate the lengths of instruction elements sent during the Guacamole protocol handshake, potentially allowing an attacker to inject Guacamole instructions during the handshake through specially-crafted data.\n\n"
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-131",
"description": "CWE-131 Incorrect Calculation of Buffer Size",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-06-15T07:28:16.579Z",
"orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
"shortName": "apache"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://lists.apache.org/thread/tn63n2lon0h5p45oft834t1dqvvxownv"
}
],
"source": {
"discovery": "EXTERNAL"
},
"timeline": [
{
"lang": "en",
"time": "2023-04-11T14:51:00.000Z",
"value": "Reported to security@guacamole.apache.org"
},
{
"lang": "en",
"time": "2023-04-11T15:07:00.000Z",
"value": "Report acknowledged by project"
},
{
"lang": "en",
"time": "2023-04-11T19:46:00.000Z",
"value": "Report confirmed by project"
},
{
"lang": "en",
"time": "2023-05-08T22:01:00.000Z",
"value": "Fix completed and merged"
},
{
"lang": "en",
"time": "2023-05-09T10:32:00.000Z",
"value": "Fix tested and confirmed by reporter"
},
{
"lang": "en",
"time": "2023-05-25T05:19:00.000Z",
"value": "Fix released"
}
],
"title": "Apache Guacamole: Incorrect calculation of Guacamole protocol element lengths",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
"assignerShortName": "apache",
"cveId": "CVE-2023-30575",
"datePublished": "2023-06-07T08:06:36.061Z",
"dateReserved": "2023-04-12T20:53:54.616Z",
"dateUpdated": "2024-10-10T14:39:33.936Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-36824 (GCVE-0-2023-36824)
Vulnerability from cvelistv5 – Published: 2023-07-11 16:16 – Updated: 2025-02-13 16:56
VLAI
Title
Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis
Summary
Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, in some cases, trigger a heap overflow and result in reading random heap memory, heap corruption and potentially remote code execution. Several scenarios that may lead to authenticated users executing a specially crafted `COMMAND GETKEYS` or `COMMAND GETKEYSANDFLAGS`and authenticated users who were set with ACL rules that match key names, executing a specially crafted command that refers to a variadic list of key names. The vulnerability is patched in Redis 7.0.12.
Severity
7.4 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
Assigner
References
5 references
Impacted products
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T17:01:09.772Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "https://github.com/redis/redis/security/advisories/GHSA-4cfx-h9gq-xpx3",
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/redis/redis/security/advisories/GHSA-4cfx-h9gq-xpx3"
},
{
"name": "https://github.com/redis/redis/releases/tag/7.0.12",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/redis/redis/releases/tag/7.0.12"
},
{
"tags": [
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TDNNH2ONMVNBQ6LUIAOAGDNFPKXNST5K/"
},
{
"tags": [
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MIF5MAGYARYUMRFK7PQI7HYXMK2HZE5T/"
},
{
"tags": [
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20230814-0009/"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "redis",
"vendor": "redis",
"versions": [
{
"lessThan": "7.0.12",
"status": "affected",
"version": "7.0.0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-36824",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-10-18T18:06:25.399106Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-10-18T18:33:29.724Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "redis",
"vendor": "redis",
"versions": [
{
"status": "affected",
"version": "\u003e= 7.0.0, \u003c 7.0.12"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, in some cases, trigger a heap overflow and result in reading random heap memory, heap corruption and potentially remote code execution. Several scenarios that may lead to authenticated users executing a specially crafted `COMMAND GETKEYS` or `COMMAND GETKEYSANDFLAGS`and authenticated users who were set with ACL rules that match key names, executing a specially crafted command that refers to a variadic list of key names. The vulnerability is patched in Redis 7.0.12."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122: Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-131",
"description": "CWE-131: Incorrect Calculation of Buffer Size",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-08-14T18:06:26.690Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/redis/redis/security/advisories/GHSA-4cfx-h9gq-xpx3",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/redis/redis/security/advisories/GHSA-4cfx-h9gq-xpx3"
},
{
"name": "https://github.com/redis/redis/releases/tag/7.0.12",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/redis/redis/releases/tag/7.0.12"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TDNNH2ONMVNBQ6LUIAOAGDNFPKXNST5K/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MIF5MAGYARYUMRFK7PQI7HYXMK2HZE5T/"
},
{
"url": "https://security.netapp.com/advisory/ntap-20230814-0009/"
}
],
"source": {
"advisory": "GHSA-4cfx-h9gq-xpx3",
"discovery": "UNKNOWN"
},
"title": "Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2023-36824",
"datePublished": "2023-07-11T16:16:16.432Z",
"dateReserved": "2023-06-27T15:43:18.386Z",
"dateUpdated": "2025-02-13T16:56:27.711Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-4257 (GCVE-0-2023-4257)
Vulnerability from cvelistv5 – Published: 2023-10-13 21:09 – Updated: 2025-02-13 17:09
VLAI
Title
Unchecked user input length in the Zephyr WiFi shell module
Summary
Unchecked user input length in /subsys/net/l2/wifi/wifi_shell.c can cause buffer overflows.
Severity
7.6 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| zephyrproject-rtos | Zephyr |
Affected:
0 , ≤ 3.4
(git)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T07:24:04.271Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-853q-q69w-gf5j"
},
{
"tags": [
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2023/11/07/1"
},
{
"tags": [
"x_transferred"
],
"url": "http://seclists.org/fulldisclosure/2023/Nov/1"
},
{
"tags": [
"x_transferred"
],
"url": "http://packetstormsecurity.com/files/175657/Zephyr-RTOS-3.x.0-Buffer-Overflows.html"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-4257",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-12-03T14:48:38.291355Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-12-03T14:48:50.367Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Zephyr",
"repo": "https://github.com/zephyrproject-rtos/zephyr",
"vendor": "zephyrproject-rtos",
"versions": [
{
"lessThanOrEqual": "3.4",
"status": "affected",
"version": "0",
"versionType": "git"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Unchecked user input length in /subsys/net/l2/wifi/wifi_shell.c can cause buffer overflows."
}
],
"value": "Unchecked user input length in /subsys/net/l2/wifi/wifi_shell.c can cause buffer overflows."
}
],
"impacts": [
{
"capecId": "CAPEC-100",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-100 Overflow Buffers"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-120",
"description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-131",
"description": "CWE-131 Incorrect Calculation of Buffer Size",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-11-14T03:06:31.523Z",
"orgId": "e2e69745-5e70-4e92-8431-deb5529a81ad",
"shortName": "zephyr"
},
"references": [
{
"url": "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-853q-q69w-gf5j"
},
{
"url": "http://www.openwall.com/lists/oss-security/2023/11/07/1"
},
{
"url": "http://seclists.org/fulldisclosure/2023/Nov/1"
},
{
"url": "http://packetstormsecurity.com/files/175657/Zephyr-RTOS-3.x.0-Buffer-Overflows.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Unchecked user input length in the Zephyr WiFi shell module",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "e2e69745-5e70-4e92-8431-deb5529a81ad",
"assignerShortName": "zephyr",
"cveId": "CVE-2023-4257",
"datePublished": "2023-10-13T21:09:51.733Z",
"dateReserved": "2023-08-08T21:07:32.623Z",
"dateUpdated": "2025-02-13T17:09:27.372Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-50736 (GCVE-0-2023-50736)
Vulnerability from cvelistv5 – Published: 2024-02-28 02:37 – Updated: 2024-08-23 14:56
VLAI
Title
A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.
Summary
A memory corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.
Severity
9 (Critical)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.lexmark.com/en_us/solutions/security/… | vendor-advisory |
Impacted products
68 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | various |
Affected:
various
|
|
| lexmark | cxtpc_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxtpc_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cstpc_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cstpc_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mxtct_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mxtct_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mxtpm_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mxtpm_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxtmm_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxtmm_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mslsg_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mslsg_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mxlsg_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mxlsg_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mslbd_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mslbd_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mxlbd_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mxlbd_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | msngm_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:msngm_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cs310 |
Affected:
0 , ≤ lw80.vyl.p249
(custom)
cpe:2.3:h:lexmark:cs317:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cs310:-:*:*:*:*:*:*:* |
|
| lexmark | mstgm_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mstgm_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mxngm_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mxngm_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | ms315 |
Affected:
0 , ≤ lw90.tl2.p205
(custom)
cpe:2.3:h:lexmark:ms417:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms415:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms315:-:*:*:*:*:*:*:* |
|
| lexmark | ms610dn |
Affected:
0 , ≤ lw90.pr2.p205
(custom)
cpe:2.3:h:lexmark:m3150dn:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:m1145:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:m1140\+:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms617:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms517:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms510:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms610dn:-:*:*:*:*:*:*:* |
|
| lexmark | mxtgm_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mxtgm_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | msngw_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:msngw_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mstgw_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mstgw_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mxtgw_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mxtgw_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cslbn_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cslbl_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cslbl_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxlbn_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxlbn_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxlbl_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxlbl_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cstzj_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cstzj_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | csnzj_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxtzj_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxtzj_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxnzj_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxnzj_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxtpp_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxtpp_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cstpp_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cstpp_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cstat_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cstat_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxtat_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxtat_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cstmh_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cstmh_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxtmh_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxtmh_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | msnsn_firmware |
Affected:
0 , ≤ 222.030
(custom)
Affected: 230.001 , ≤ 230.041 (custom) Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:msnsn_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mstsn_firmware |
Affected:
0 , ≤ 222.030
(custom)
Affected: 230.001 , ≤ 230.041 (custom) Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mstsn_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mxtsn_firmware |
Affected:
0 , ≤ 222.030
(custom)
Affected: 230.001 , ≤ 230.041 (custom) Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mxtsn_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | csngv_firmware |
Affected:
0 , ≤ 222.030
(custom)
Affected: 230.001 , ≤ 230.041 (custom) Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:csngv_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cs410 |
Affected:
0 , ≤ lw80.vy2.p249
(custom)
cpe:2.3:h:lexmark:cs417:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cs410:-:*:*:*:*:*:*:* |
|
| lexmark | cstgv_firmware |
Affected:
0 , ≤ 222.030
(custom)
Affected: 230.001 , ≤ 230.041 (custom) Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cstgv_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxtgv_firmware |
Affected:
0 , ≤ 222.030
(custom)
Affected: 230.001 , ≤ 230.041 (custom) Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxtgv_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | ms610de |
Affected:
0 , ≤ lw90.pr4.p205
(custom)
cpe:2.3:h:lexmark:m3150de:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms610de:-:*:*:*:*:*:*:* |
|
| lexmark | mx410 |
Affected:
0 , ≤ lw90.sb4.p205
(custom)
cpe:2.3:h:lexmark:xm1145:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm1140:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx517:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx511:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx510:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx417:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx410:-:*:*:*:*:*:*:* |
|
| lexmark | mx610 |
Affected:
0 , ≤ lw90.sb7.p205
(custom)
cpe:2.3:h:lexmark:xm3150:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx617:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx611:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx610:-:*:*:*:*:*:*:* |
|
| lexmark | ms711 |
Affected:
0 , ≤ lw90.dn2.p205
(custom)
cpe:2.3:h:lexmark:m5163dn:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms818:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms817:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms812dn:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms811:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms810dn:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms710:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms711:-:*:*:*:*:*:*:* |
|
| lexmark | ms810de |
Affected:
0 , ≤ lw90.dn4.p205
(custom)
cpe:2.3:h:lexmark:m5163de:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:m5155:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms810de:-:*:*:*:*:*:*:* |
|
| lexmark | ms812de |
Affected:
0 , ≤ lw90.dn7.p205
(custom)
cpe:2.3:h:lexmark:m5170:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms812de:-:*:*:*:*:*:*:* |
|
| lexmark | mx710 |
Affected:
0 , ≤ lw90.tu.p205
(custom)
cpe:2.3:h:lexmark:xm7270:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm7263:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm7170:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm7163:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm7155:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm5270:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm5263:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm5170:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm5163:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx812:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx811:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx810:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx718:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx717:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx711:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx710:-:*:*:*:*:*:*:* |
|
| lexmark | ms911 |
Affected:
0 , ≤ lw90.sa.p205
(custom)
cpe:2.3:h:lexmark:ms911:-:*:*:*:*:*:*:* |
|
| lexmark | mx910 |
Affected:
0 , ≤ lw90.mg.p205
(custom)
cpe:2.3:h:lexmark:xm9165:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm9155:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm9145:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx912:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx911:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx910:-:*:*:*:*:*:*:* |
|
| lexmark | mx6500e |
Affected:
0 , ≤ lw90.jd.p205
(custom)
cpe:2.3:h:lexmark:mx6500e:-:*:*:*:*:*:*:* |
|
| lexmark | cs510 |
Affected:
0 , ≤ lw90.vy4.p205
(custom)
cpe:2.3:h:lexmark:c2132:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cs517:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cs510:-:*:*:*:*:*:*:* |
|
| lexmark | cx410 |
Affected:
0 , ≤ lw90.gm4.p205
(custom)
cpe:2.3:h:lexmark:xc2130:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cx417:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cx410:-:*:*:*:*:*:*:* |
|
| lexmark | cx510 |
Affected:
0 , ≤ lw90.gm7.p205
(custom)
cpe:2.3:h:lexmark:xc2132:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cx517:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cx510:-:*:*:*:*:*:*:* |
|
| lexmark | ms310 |
Affected:
0 , ≤ lw80.prl.p249
(custom)
cpe:2.3:h:lexmark:m1140:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms410:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms317:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms312:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms310:-:*:*:*:*:*:*:* |
|
| lexmark | mx310 |
Affected:
0 , ≤ lw80.sb2.p249
(custom)
cpe:2.3:h:lexmark:xm1135:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx317:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx310:-:*:*:*:*:*:*:* |
|
| lexmark | cx310 |
Affected:
0 , ≤ lw80.gm2.p249
(custom)
cpe:2.3:h:lexmark:cx317:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cx310:-:*:*:*:*:*:*:* |
|
| lexmark | c746 |
Affected:
0 , ≤ lhs60.cm2.p763
(custom)
cpe:2.3:h:lexmark:c746:-:*:*:*:*:*:*:* |
|
| lexmark | c748 |
Affected:
0 , ≤ lhs60.cm4.p763
(custom)
cpe:2.3:h:lexmark:cs748:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:c748:-:*:*:*:*:*:*:* |
|
| lexmark | c792 |
Affected:
0 , ≤ lhs60.hc.p763
(custom)
cpe:2.3:h:lexmark:cs796:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:c792:-:*:*:*:*:*:*:* |
|
| lexmark | c925 |
Affected:
0 , ≤ lhs60.hv.p763
(custom)
cpe:2.3:h:lexmark:c925:-:*:*:*:*:*:*:* |
|
| lexmark | c950 |
Affected:
0 , ≤ lhs60.tp.p763
(custom)
cpe:2.3:h:lexmark:c950:-:*:*:*:*:*:*:* |
|
| lexmark | x548 |
Affected:
0 , ≤ lhs60.vk.p763
(custom)
cpe:2.3:h:lexmark:xs548:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:x548:-:*:*:*:*:*:*:* |
|
| lexmark | x746 |
Affected:
0 , ≤ lhs60.ny.p763
(custom)
cpe:2.3:h:lexmark:xs748:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:x748:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:x746:-:*:*:*:*:*:*:* |
|
| lexmark | x792 |
Affected:
0 , ≤ lhs60.mr.p763
(custom)
cpe:2.3:h:lexmark:xs798:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xs796:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xs795:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:x792:-:*:*:*:*:*:*:* |
|
| lexmark | x925 |
Affected:
0 , ≤ lhs60.hk.p763
(custom)
cpe:2.3:h:lexmark:xs925:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:x925:-:*:*:*:*:*:*:* |
|
| lexmark | x950 |
Affected:
0 , ≤ lhs60.tq.p763
(custom)
cpe:2.3:h:lexmark:xs955:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xs950:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:x954:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:x952:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:x950:-:*:*:*:*:*:*:* |
|
| lexmark | 6500e |
Affected:
0 , ≤ lhs60.jr.p763
(custom)
cpe:2.3:h:lexmark:6500e:-:*:*:*:*:*:*:* |
Date Public
2024-01-19 05:00
Credits
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T22:16:47.298Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:2.3:o:lexmark:cxtpc_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxtpc_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cstpc_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cstpc_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mxtct_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mxtct_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mxtpm_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mxtpm_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxtmm_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxtmm_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mslsg_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mslsg_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mxlsg_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mxlsg_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mslbd_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mslbd_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mxlbd_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mxlbd_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:msngm_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "msngm_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:cs317:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cs310:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cs310",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw80.vyl.p249",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mstgm_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mstgm_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mxngm_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mxngm_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:ms417:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms415:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms315:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "ms315",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.tl2.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:m3150dn:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:m1145:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:m1140\\+:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms617:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms517:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms510:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms610dn:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "ms610dn",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.pr2.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mxtgm_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mxtgm_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:msngw_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "msngw_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mstgw_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mstgw_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mxtgw_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mxtgw_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cslbn_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cslbl_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cslbl_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxlbn_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxlbn_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxlbl_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxlbl_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cstzj_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cstzj_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "csnzj_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxtzj_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxtzj_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxnzj_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxnzj_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxtpp_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxtpp_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cstpp_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cstpp_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cstat_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cstat_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxtat_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxtat_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cstmh_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cstmh_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxtmh_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxtmh_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:msnsn_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "msnsn_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "222.030",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "230.001",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mstsn_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mstsn_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "222.030",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "230.001",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mxtsn_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mxtsn_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "222.030",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "230.001",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:csngv_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "csngv_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "222.030",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "230.001",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:cs417:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cs410:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cs410",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw80.vy2.p249",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cstgv_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cstgv_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "222.030",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "230.001",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxtgv_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxtgv_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "222.030",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "230.001",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:m3150de:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms610de:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "ms610de",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.pr4.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xm1145:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm1140:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx517:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx511:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx510:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx417:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx410:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mx410",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.sb4.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xm3150:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx617:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx611:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx610:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mx610",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.sb7.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:m5163dn:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms818:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms817:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms812dn:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms811:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms810dn:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms710:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms711:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "ms711",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.dn2.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:m5163de:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:m5155:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms810de:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "ms810de",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.dn4.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:m5170:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms812de:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "ms812de",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.dn7.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xm7270:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm7263:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm7170:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm7163:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm7155:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm5270:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm5263:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm5170:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm5163:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx812:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx811:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx810:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx718:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx717:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx711:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx710:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mx710",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.tu.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:ms911:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "ms911",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.sa.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xm9165:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm9155:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm9145:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx912:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx911:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx910:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mx910",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.mg.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:mx6500e:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mx6500e",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.jd.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:c2132:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cs517:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cs510:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cs510",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.vy4.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xc2130:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cx417:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cx410:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cx410",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.gm4.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xc2132:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cx517:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cx510:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cx510",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.gm7.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:m1140:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms410:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms317:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms312:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms310:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "ms310",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw80.prl.p249",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xm1135:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx317:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx310:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mx310",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw80.sb2.p249",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:cx317:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cx310:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cx310",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw80.gm2.p249",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:c746:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "c746",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.cm2.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:cs748:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:c748:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "c748",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.cm4.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:cs796:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:c792:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "c792",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.hc.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:c925:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "c925",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.hv.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:c950:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "c950",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.tp.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xs548:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:x548:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "x548",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.vk.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xs748:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:x748:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:x746:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "x746",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.ny.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xs798:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xs796:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xs795:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:x792:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "x792",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.mr.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xs925:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:x925:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "x925",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.hk.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xs955:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xs950:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:x954:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:x952:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:x950:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "x950",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.tq.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:6500e:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "6500e",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.jr.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-50736",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-03-05T16:46:14.875524Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-08-23T14:56:10.517Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "various",
"vendor": "Lexmark",
"versions": [
{
"status": "affected",
"version": "various"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"user": "00000000-0000-4000-9000-000000000000",
"value": "Chris Anastasio working with Trend Micro\u2019s Zero Day Initiative (ZDI)"
}
],
"datePublic": "2024-01-19T05:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A memory corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.\u003cbr\u003e"
}
],
"value": "A memory corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.\n"
}
],
"impacts": [
{
"capecId": "CAPEC-456",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-456 Infected Memory"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-131",
"description": "CWE-131",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-02-28T02:37:45.438Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2023-50736",
"datePublished": "2024-02-28T02:37:45.438Z",
"dateReserved": "2023-12-11T20:00:38.337Z",
"dateUpdated": "2024-08-23T14:56:10.517Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-52557 (GCVE-0-2023-52557)
Vulnerability from cvelistv5 – Published: 2024-03-01 16:14 – Updated: 2024-08-02 23:03
VLAI
Title
OpenBSD 7.3 invalid l2tp message npppd crash
Summary
In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wrong length.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
Assigner
References
Impacted products
Date Public
2023-09-21 00:00
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:openbsd:openbsd:7.3:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "openbsd",
"vendor": "openbsd",
"versions": [
{
"lessThan": "7.3_errata_016",
"status": "affected",
"version": "7.3",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2023-52557",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-03-01T20:52:55.807478Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-805",
"description": "CWE-805 Buffer Access with Incorrect Length Value",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-07-26T15:58:46.140Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T23:03:20.647Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/016_npppd.patch.sig"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/openbsd/src/commit/abf3a29384c582c807a621e7fc6e7c68d0cafe9b"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "affected",
"product": "OpenBSD",
"repo": "https://github.com/openbsd/src/",
"vendor": "OpenBSD",
"versions": [
{
"lessThan": "7.3 errata 016",
"status": "affected",
"version": "7.3",
"versionType": "custom"
}
]
}
],
"datePublic": "2023-09-21T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eIn OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wrong length.\u003c/span\u003e\u003cbr\u003e"
}
],
"value": "In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wrong length.\n"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-131",
"description": "CWE-131 Incorrect Calculation of Buffer Size",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-03-01T16:26:42.158Z",
"orgId": "9119a7d8-5eab-497f-8521-727c672e3725",
"shortName": "cisa-cg"
},
"references": [
{
"url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/016_npppd.patch.sig"
},
{
"url": "https://github.com/openbsd/src/commit/abf3a29384c582c807a621e7fc6e7c68d0cafe9b"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "OpenBSD 7.3 invalid l2tp message npppd crash",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "9119a7d8-5eab-497f-8521-727c672e3725",
"assignerShortName": "cisa-cg",
"cveId": "CVE-2023-52557",
"datePublished": "2024-03-01T16:14:56.065Z",
"dateReserved": "2024-03-01T16:04:51.307Z",
"dateUpdated": "2024-08-02T23:03:20.647Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-52558 (GCVE-0-2023-52558)
Vulnerability from cvelistv5 – Published: 2024-03-01 16:33 – Updated: 2024-11-19 21:42
VLAI
Title
OpenBSD 7.4 and 7.3 m_split() network buffer kernel crash
Summary
In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-131 - Incorrect Calculation of Buffer Size
Assigner
References
Impacted products
Date Public
2023-10-25 00:00
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "openbsd",
"vendor": "openbsd",
"versions": [
{
"lessThan": "7.3_errata_019",
"status": "affected",
"version": "7.3",
"versionType": "custom"
},
{
"lessThan": "7.4_errata_002",
"status": "affected",
"version": "7.4",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2023-52558",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-19T21:41:24.595292Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-19T21:42:52.858Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T23:03:20.692Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/002_msplit.patch.sig"
},
{
"tags": [
"x_transferred"
],
"url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/019_msplit.patch.sig"
},
{
"tags": [
"x_transferred"
],
"url": "https://github.com/openbsd/src/commit/7b4d35e0a60ba1dd4daf4b1c2932020a22463a89"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "affected",
"product": "OpenBSD",
"repo": "https://github.com/openbsd/src/",
"vendor": "OpenBSD",
"versions": [
{
"lessThan": "7.3 errata 019",
"status": "affected",
"version": "7.3 ",
"versionType": "custom"
},
{
"lessThan": "7.4 errata 002",
"status": "affected",
"version": "7.4",
"versionType": "custom"
}
]
}
],
"datePublic": "2023-10-25T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a\u0026nbsp;network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences."
}
],
"value": "In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a\u00a0network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-131",
"description": "CWE-131 Incorrect Calculation of Buffer Size",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-03-01T16:39:00.281Z",
"orgId": "9119a7d8-5eab-497f-8521-727c672e3725",
"shortName": "cisa-cg"
},
"references": [
{
"url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/002_msplit.patch.sig"
},
{
"url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/019_msplit.patch.sig"
},
{
"url": "https://github.com/openbsd/src/commit/7b4d35e0a60ba1dd4daf4b1c2932020a22463a89"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "OpenBSD 7.4 and 7.3 m_split() network buffer kernel crash",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "9119a7d8-5eab-497f-8521-727c672e3725",
"assignerShortName": "cisa-cg",
"cveId": "CVE-2023-52558",
"datePublished": "2024-03-01T16:33:06.604Z",
"dateReserved": "2024-03-01T16:04:51.307Z",
"dateUpdated": "2024-11-19T21:42:52.858Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-5941 (GCVE-0-2023-5941)
Vulnerability from cvelistv5 – Published: 2023-11-08 08:52 – Updated: 2025-02-13 17:25
VLAI
Title
libc stdio buffer overflow
Summary
In versions of FreeBSD 12.4-RELEASE prior to 12.4-RELEASE-p7 and FreeBSD 13.2-RELEASE prior to 13.2-RELEASE-p5 the __sflush() stdio function in libc does not correctly update FILE objects' write space members for write-buffered streams when the write(2) system call returns an error. Depending on the nature of an application that calls libc's stdio functions and the presence of errors returned from the write(2) system call (or an overridden stdio write routine) a heap buffer overflow may occur. Such overflows may lead to data corruption or the execution of arbitrary code at the privilege level of the calling program.
Severity
No CVSS data available.
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://security.freebsd.org/advisories/FreeBSD-S… | vendor-advisory |
| https://security.netapp.com/advisory/ntap-2023121… |
Impacted products
Credits
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T08:14:25.137Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://security.freebsd.org/advisories/FreeBSD-SA-23:15.stdio.asc"
},
{
"tags": [
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20231214-0004/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"modules": [
"libc"
],
"product": "FreeBSD",
"vendor": "FreeBSD",
"versions": [
{
"lessThan": "p7",
"status": "affected",
"version": "12.4-RELEASE",
"versionType": "release"
},
{
"lessThan": "p5",
"status": "affected",
"version": "13.2-RELEASE",
"versionType": "release"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"user": "00000000-0000-4000-9000-000000000000",
"value": "inooo"
}
],
"descriptions": [
{
"lang": "en",
"value": "In versions of FreeBSD 12.4-RELEASE prior to 12.4-RELEASE-p7 and FreeBSD 13.2-RELEASE prior to 13.2-RELEASE-p5 the __sflush() stdio function in libc does not correctly update FILE objects\u0027 write space members for write-buffered streams when the write(2) system call returns an error. \u00a0Depending on the nature of an application that calls libc\u0027s stdio functions and the presence of errors returned from the write(2) system call (or an overridden stdio write routine) a heap buffer overflow may occur. Such overflows may lead to data corruption or the execution of arbitrary code at the privilege level of the calling program."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-131",
"description": "CWE-131 Incorrect Calculation of Buffer Size",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-12-14T10:06:25.798Z",
"orgId": "63664ac6-956c-4cba-a5d0-f46076e16109",
"shortName": "freebsd"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://security.freebsd.org/advisories/FreeBSD-SA-23:15.stdio.asc"
},
{
"url": "https://security.netapp.com/advisory/ntap-20231214-0004/"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "libc stdio buffer overflow",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "63664ac6-956c-4cba-a5d0-f46076e16109",
"assignerShortName": "freebsd",
"cveId": "CVE-2023-5941",
"datePublished": "2023-11-08T08:52:26.564Z",
"dateReserved": "2023-11-02T18:54:11.312Z",
"dateUpdated": "2025-02-13T17:25:58.008Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-6780 (GCVE-0-2023-6780)
Vulnerability from cvelistv5 – Published: 2024-01-31 14:08 – Updated: 2026-05-12 10:41
VLAI
Title
Glibc: integer overflow in __vsyslog_internal()
Summary
An integer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message, resulting in undefined behavior. This issue affects glibc 2.37 and newer.
Severity
5.3 (Medium)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-131 - Incorrect Calculation of Buffer Size
Assigner
References
11 references
Impacted products
9 products
| Vendor | Product | Version | |
|---|---|---|---|
| n/a | glibc |
Unaffected:
2.39
|
|
| Red Hat | Red Hat Enterprise Linux 6 |
cpe:/o:redhat:enterprise_linux:6 |
|
| Red Hat | Red Hat Enterprise Linux 7 |
cpe:/o:redhat:enterprise_linux:7 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9 |
|
| Fedora | Fedora | ||
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP |
Affected:
V3.1.5 , < *
(custom)
|
|
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP |
Affected:
V3.1.5 , < *
(custom)
|
|
| Siemens | SIPLUS S7-1500 CPU 1518-4 PN/DP MFP |
Affected:
V3.1.5 , < *
(custom)
|
Date Public
2024-01-30 00:00
Credits
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2025-02-07T17:02:41.644Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html"
},
{
"tags": [
"x_transferred"
],
"url": "http://seclists.org/fulldisclosure/2024/Feb/3"
},
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/security/cve/CVE-2023-6780"
},
{
"name": "RHBZ#2254396",
"tags": [
"issue-tracking",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2254396"
},
{
"tags": [
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2FIH77VHY3KCRROCXOT6L27WMZXSJ2G/"
},
{
"tags": [
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MWQ6BZJ6CV5UAW4VZSKJ6TO4KIW2KWAQ/"
},
{
"tags": [
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/202402-01"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.openwall.com/lists/oss-security/2024/01/30/6"
},
{
"tags": [
"x_transferred"
],
"url": "https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt"
},
{
"url": "https://security.netapp.com/advisory/ntap-20250207-0010/"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-6780",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-01-31T16:36:34.378685Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-06-17T21:29:19.534Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.5",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.5",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.5",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.5",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.5",
"versionType": "custom"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-12T10:41:09.437Z",
"orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
"shortName": "siemens-SADP"
},
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html"
}
],
"x_adpType": "supplier"
}
],
"cna": {
"affected": [
{
"product": "glibc",
"vendor": "n/a",
"versions": [
{
"status": "unaffected",
"version": "2.39"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:6"
],
"defaultStatus": "unaffected",
"packageName": "compat-glibc",
"product": "Red Hat Enterprise Linux 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:6"
],
"defaultStatus": "unaffected",
"packageName": "glibc",
"product": "Red Hat Enterprise Linux 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unaffected",
"packageName": "compat-glibc",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unaffected",
"packageName": "glibc",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "glibc",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "glibc",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://packages.fedoraproject.org/",
"defaultStatus": "affected",
"packageName": "glibc",
"product": "Fedora",
"vendor": "Fedora"
}
],
"credits": [
{
"lang": "en",
"value": "Red Hat would like to thank Qualys Threat Research Unit for reporting this issue."
}
],
"datePublic": "2024-01-30T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "An integer overflow was found in the __vsyslog_internal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a very long message, leading to an incorrect calculation of the buffer size to store the message, resulting in undefined behavior. This issue affects glibc 2.37 and newer."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Low"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-131",
"description": "Incorrect Calculation of Buffer Size",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-03-26T15:30:47.720Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"url": "http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html"
},
{
"url": "http://seclists.org/fulldisclosure/2024/Feb/3"
},
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2023-6780"
},
{
"name": "RHBZ#2254396",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2254396"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D2FIH77VHY3KCRROCXOT6L27WMZXSJ2G/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MWQ6BZJ6CV5UAW4VZSKJ6TO4KIW2KWAQ/"
},
{
"url": "https://security.gentoo.org/glsa/202402-01"
},
{
"url": "https://www.openwall.com/lists/oss-security/2024/01/30/6"
},
{
"url": "https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt"
}
],
"timeline": [
{
"lang": "en",
"time": "2023-12-08T00:00:00.000Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2024-01-30T00:00:00.000Z",
"value": "Made public."
}
],
"title": "Glibc: integer overflow in __vsyslog_internal()",
"x_redhatCweChain": "CWE-190-\u003eCWE-131: Integer Overflow or Wraparound leads to Incorrect Calculation of Buffer Size"
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2023-6780",
"datePublished": "2024-01-31T14:08:02.610Z",
"dateReserved": "2023-12-13T14:37:40.684Z",
"dateUpdated": "2026-05-12T10:41:09.437Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
Mitigation
Phase: Implementation
Description:
- When allocating a buffer for the purpose of transforming, converting, or encoding an input, allocate enough memory to handle the largest possible encoding. For example, in a routine that converts "&" characters to "&" for HTML entity encoding, the output buffer needs to be at least 5 times as large as the input buffer.
Mitigation ID: MIT-36
Phase: Implementation
Description:
- Understand the programming language's underlying representation and how it interacts with numeric calculation (CWE-681). Pay close attention to byte size discrepancies, precision, signed/unsigned distinctions, truncation, conversion and casting between types, "not-a-number" calculations, and how the language handles numbers that are too large or too small for its underlying representation. [REF-7]
- Also be careful to account for 32-bit, 64-bit, and other potential differences that may affect the numeric representation.
Mitigation ID: MIT-8
Phase: Implementation
Strategy: Input Validation
Description:
- Perform input validation on any numeric input by ensuring that it is within the expected range. Enforce that the input meets both the minimum and maximum requirements for the expected range.
Mitigation ID: MIT-15
Phase: Architecture and Design
Description:
- For any security checks that are performed on the client side, ensure that these checks are duplicated on the server side, in order to avoid CWE-602. Attackers can bypass the client-side checks by modifying values after the checks have been performed, or by changing the client to remove the client-side checks entirely. Then, these modified values would be submitted to the server.
Mitigation
Phase: Implementation
Description:
- When processing structured incoming data containing a size field followed by raw data, identify and resolve any inconsistencies between the size field and the actual size of the data (CWE-130).
Mitigation
Phase: Implementation
Description:
- When allocating memory that uses sentinels to mark the end of a data structure - such as NUL bytes in strings - make sure you also include the sentinel in your calculation of the total amount of memory that must be allocated.
Mitigation ID: MIT-13
Phase: Implementation
Description:
- Replace unbounded copy functions with analogous functions that support length arguments, such as strcpy with strncpy. Create these if they are not available.
Mitigation
Phase: Implementation
Description:
- Use sizeof() on the appropriate data type to avoid CWE-467.
Mitigation
Phase: Implementation
Description:
- Use the appropriate type for the desired action. For example, in C/C++, only use unsigned types for values that could never be negative, such as height, width, or other numbers related to quantity. This will simplify validation and will reduce surprises related to unexpected casting.
Mitigation ID: MIT-4
Phase: Architecture and Design
Strategy: Libraries or Frameworks
Description:
- Use a vetted library or framework that does not allow this weakness to occur or provides constructs that make this weakness easier to avoid [REF-1482].
- Use libraries or frameworks that make it easier to handle numbers without unexpected consequences, or buffer allocation routines that automatically track buffer size.
- Examples include safe integer handling packages such as SafeInt (C++) or IntegerLib (C or C++). [REF-106]
Mitigation ID: MIT-10
Phases: Operation, Build and Compilation
Strategy: Environment Hardening
Description:
- Use automatic buffer overflow detection mechanisms that are offered by certain compilers or compiler extensions. Examples include: the Microsoft Visual Studio /GS flag, Fedora/Red Hat FORTIFY_SOURCE GCC flag, StackGuard, and ProPolice, which provide various mechanisms including canary-based detection and range/index checking.
- D3-SFCV (Stack Frame Canary Validation) from D3FEND [REF-1334] discusses canary-based detection in detail.
Mitigation ID: MIT-11
Phases: Operation, Build and Compilation
Strategy: Environment Hardening
Description:
- Run or compile the software using features or extensions that randomly arrange the positions of a program's executable and libraries in memory. Because this makes the addresses unpredictable, it can prevent an attacker from reliably jumping to exploitable code.
- Examples include Address Space Layout Randomization (ASLR) [REF-58] [REF-60] and Position-Independent Executables (PIE) [REF-64]. Imported modules may be similarly realigned if their default memory addresses conflict with other modules, in a process known as "rebasing" (for Windows) and "prelinking" (for Linux) [REF-1332] using randomly generated addresses. ASLR for libraries cannot be used in conjunction with prelink since it would require relocating the libraries at run-time, defeating the whole purpose of prelinking.
- For more information on these techniques see D3-SAOR (Segment Address Offset Randomization) from D3FEND [REF-1335].
Mitigation ID: MIT-12
Phase: Operation
Strategy: Environment Hardening
Description:
- Use a CPU and operating system that offers Data Execution Protection (using hardware NX or XD bits) or the equivalent techniques that simulate this feature in software, such as PaX [REF-60] [REF-61]. These techniques ensure that any instruction executed is exclusively at a memory address that is part of the code segment.
- For more information on these techniques see D3-PSEP (Process Segment Execution Prevention) from D3FEND [REF-1336].
Mitigation ID: MIT-26
Phase: Implementation
Strategy: Compilation or Build Hardening
Description:
- Examine compiler warnings closely and eliminate problems with potential security implications, such as signed / unsigned mismatch in memory operations, or use of uninitialized variables. Even if the weakness is rarely exploitable, a single failure may lead to the compromise of the entire system.
Mitigation ID: MIT-17
Phases: Architecture and Design, Operation
Strategy: Environment Hardening
Description:
- Run your code using the lowest privileges that are required to accomplish the necessary tasks [REF-76]. If possible, create isolated accounts with limited privileges that are only used for a single task. That way, a successful attack will not immediately give the attacker access to the rest of the software or its environment. For example, database applications rarely need to run as the database administrator, especially in day-to-day operations.
Mitigation ID: MIT-22
Phases: Architecture and Design, Operation
Strategy: Sandbox or Jail
Description:
- Run the code in a "jail" or similar sandbox environment that enforces strict boundaries between the process and the operating system. This may effectively restrict which files can be accessed in a particular directory or which commands can be executed by the software.
- OS-level examples include the Unix chroot jail, AppArmor, and SELinux. In general, managed code may provide some protection. For example, java.io.FilePermission in the Java SecurityManager allows the software to specify restrictions on file operations.
- This may not be a feasible solution, and it only limits the impact to the operating system; the rest of the application may still be subject to compromise.
- Be careful to avoid CWE-243 and other weaknesses related to jails.
CAPEC-100: Overflow Buffers
Buffer Overflow attacks target improper or missing bounds checking on buffer operations, typically triggered by input injected by an adversary. As a consequence, an adversary is able to write past the boundaries of allocated buffer regions in memory, causing a program crash or potentially redirection of execution as per the adversaries' choice.
CAPEC-47: Buffer Overflow via Parameter Expansion
In this attack, the target software is given input that the adversary knows will be modified and expanded in size during processing. This attack relies on the target software failing to anticipate that the expanded data may exceed some internal limit, thereby creating a buffer overflow.