PT-2023-6730 · Unknown+1 · Open Babel+1
Claudio Bozzato
·
Publicado
2023-07-21
·
Atualizado
2023-07-27
·
CVE-2022-46292
CVSS v2.0
10
Crítica
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Open Babel versions 3.1.1 and prior
Description
The issue is related to an out-of-bounds write vulnerability in the translationVectors parsing functionality of Open Babel, which can be exploited by a remote attacker using a specially crafted malformed file to achieve arbitrary code execution. This vulnerability affects the MOPAC file format, specifically inside the Unit Cell Translation section.
Recommendations
For Open Babel version 3.1.1, consider disabling the translationVectors parsing functionality until a patch is available.
Restrict access to the MOPAC file format, especially the Unit Cell Translation section, to minimize the risk of exploitation.
Avoid using specially crafted malformed files that could trigger this vulnerability.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Corruption
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Debian
Open Babel