PT-2023-2369 · Finixbit · Elf-Parser

10Cksyiqiyinhangzhoutechnology · Published 2023-03-02 · Updated 2024-05-17 · CVE-2023-1157

Positive Technologies (AI Summary)

CVSS v2.0

1.7

Low

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions finixbit elf-parser (affected versions not specified)

Description The issue is related to insufficient input validation in the elf parser::Elf parser::get segments function of the elf parser.cpp component in the elf-parser program. This can lead to denial of service when exploited. Local access is required for an attack. The exploit has been publicly disclosed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2023-02144

CVE-2023-1157

Affected Products

Elf-Parser

References · 7

• 🔥 https://github.com/10cksYiqiyinHangzhouTechnology/elf-parser_segments_poc · Exploit
• https://bdu.fstec.ru/vul/2023-02144 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-1157 · Security Note
• https://vuldb.com/?id.222222 · Note
• https://t.me/cvenotify/45979 · Telegram Post
• https://t.me/cibsecurity/59333 · Telegram Post
• https://vuldb.com/?ctiid.222222 · Note