PT-2023-2369 · Finixbit · Elf-Parser

10Cksyiqiyinhangzhoutechnology · Publicado 2023-03-02 · Atualizado 2024-05-17 · CVE-2023-1157

Positive Technologies (AI Summary)

CVSS v2.0

1.7

Baixa

Vetor base

AV:L/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions finixbit elf-parser (affected versions not specified)

Description The issue is related to insufficient input validation in the elf parser::Elf parser::get segments function of the elf parser.cpp component in the elf-parser program. This can lead to denial of service when exploited. Local access is required for an attack. The exploit has been publicly disclosed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Enumeração de Fraquezas

CWE-404

Identificadores relacionados

BDU:2023-02144

CVE-2023-1157

Produtos afetados

Elf-Parser

Referências · 7

• 🔥 https://github.com/10cksYiqiyinHangzhouTechnology/elf-parser_segments_poc · Exploit
• https://bdu.fstec.ru/vul/2023-02144 · Nota de Segurança
• https://vuldb.com/?id.222222 · Nota
• https://t.me/cvenotify/45979 · Publicação no Telegram
• https://t.me/cibsecurity/59333 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-1157 · Nota de Segurança
• https://vuldb.com/?ctiid.222222 · Nota