Lucene search

K
cve[email protected]CVE-2023-41268
HistoryDec 06, 2023 - 4:15 a.m.

CVE-2023-41268

2023-12-0604:15:07
CWE-787
CWE-20
web.nvd.nist.gov
13
cve-2023-41268
samsung
escargot
input validation
vulnerability
stack overflow
segmentation fault
nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.9%

Improper input validation vulnerability in Samsung Open Source Escargot allows stack overflow and segmentation fault.Β This issue affects Escargot: from 3.0.0 through 4.0.0.

Affected configurations

NVD
Node
samsungescargotMatch3.0.0
OR
samsungescargotMatch4.0.0

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Escargot",
    "repo": "https://github.com/Samsung/escargot/",
    "vendor": "Samsung Open Source",
    "versions": [
      {
        "lessThanOrEqual": "4.0.0",
        "status": "affected",
        "version": "3.0.0",
        "versionType": "git"
      }
    ]
  }
]

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.9%

Related for CVE-2023-41268