Lucene search

Samsung.tv_applianceCVELIST:CVE-2023-41268

HistoryDec 06, 2023 - 3:46 a.m.

CVE-2023-41268 Possible stack overflow due to insufficient input validation

2023-12-0603:46:16

CWE-20

samsung.tv_appliance

www.cve.org

cve-2023-41268

samsung open source escargot

insufficient input validation

stack overflow

segmentation fault

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

9.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.8%

JSON

Improper input validation vulnerability in Samsung Open Source Escargot allows stack overflow and segmentation fault. This issue affects Escargot: from 3.0.0 through 4.0.0.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Escargot",
    "repo": "https://github.com/Samsung/escargot/",
    "vendor": "Samsung Open Source",
    "versions": [
      {
        "lessThanOrEqual": "4.0.0",
        "status": "affected",
        "version": "3.0.0",
        "versionType": "git"
      }
    ]
  }
]

References

github.com/Samsung/escargot/pull/1260

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

9.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.8%

JSON

Related for CVELIST:CVE-2023-41268