PT-2023-30738 · Wire-Avs · Wire-Avs

Sanojwr · Published 2023-11-20 · Updated 2023-11-29 · CVE-2023-48221

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions wire-avs versions prior to 9.2.22 wire-avs versions prior to 9.3.5

Description A remote format string issue could potentially allow an attacker to cause a denial of service or possibly execute arbitrary code.

Recommendations For versions prior to 9.2.22, update to version 9.2.22 or later. For versions prior to 9.3.5, update to version 9.3.5 or later.

Exploit

Fix

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2023-48221

GHSA-M4XG-FCR3-W3PQ

Affected Products

Wire-Avs

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/48xxx/CVE-2023-48221.json · Exploit
• https://github.com/wireapp/wire-avs/security/advisories/GHSA-m4xg-fcr3-w3pq · Vendor Advisory
• https://github.com/wireapp/wire-avs/commit/364c3326a1331a84607bce2e17126306d39150cd · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-48221 · Security Note
• https://osv.dev/vulnerability/CVE-2023-48221 · Vendor Advisory
• https://t.me/latest_high_impact_cve/101 · Telegram Post