PT-2023-30738 · Wire-Avs · Wire-Avs

Sanojwr · Publicado 2023-11-20 · Atualizado 2023-11-29 · CVE-2023-48221

Positive Technologies (AI Summary)

CVSS v3.1

7.3

Alta

Vetor base

AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions wire-avs versions prior to 9.2.22 wire-avs versions prior to 9.3.5

Description A remote format string issue could potentially allow an attacker to cause a denial of service or possibly execute arbitrary code.

Recommendations For versions prior to 9.2.22, update to version 9.2.22 or later. For versions prior to 9.3.5, update to version 9.3.5 or later.

Exploit

Correção

Use of Externally-Controlled Format String

Enumeração de Fraquezas

CWE-134

Identificadores relacionados

CVE-2023-48221

GHSA-M4XG-FCR3-W3PQ

Produtos afetados

Wire-Avs

Referências · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/48xxx/CVE-2023-48221.json · Exploit
• https://github.com/wireapp/wire-avs/security/advisories/GHSA-m4xg-fcr3-w3pq · Aviso do Fabricante
• https://github.com/wireapp/wire-avs/commit/364c3326a1331a84607bce2e17126306d39150cd · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2023-48221 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-48221 · Aviso do Fabricante
• https://t.me/latest_high_impact_cve/101 · Publicação no Telegram