PT-2023-18970 · Libpeconv · Libpeconv

Tomer Dricker · Published 2023-02-15 · Updated 2025-03-19 · CVE-2023-23461

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Libpeconv versions before commit b076013

Description The issue is related to an access violation in Libpeconv. The estimated number of potentially affected devices and details about real-world incidents are not provided.

Recommendations For versions before commit b076013, update to a version after commit b076013 to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable component until a patch is available.

Fix

Related Identifiers

CVE-2023-23461

Affected Products

Libpeconv

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-23461 · Security Note
• https://osv.dev/vulnerability/CVE-2023-23461 · Vendor Advisory
• https://t.me/cvenotify/44394 · Telegram Post
• https://t.me/cibsecurity/58270 · Telegram Post
• https://t.me/cvenotify/115400 · Telegram Post
• https://gov.il/en/Departments/faq/cve_advisories · Note