CVE-2023-45897

2023-10-2821:15:07

Debian Security Bug Tracker

security-tracker.debian.org

exfatprogs vulnerability

oob memory access

read_file_dentry_set

unix

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

6.7

Confidence

High

EPSS

Percentile

15.5%

JSON

exfatprogs before 1.2.2 allows out-of-bounds memory access, such as in read_file_dentry_set.

OSVersionArchitecturePackageVersionFilename
Debian12allexfatprogs< 1.2.0-1+deb12u1exfatprogs_1.2.0-1+deb12u1_all.deb
Debian11allexfatprogs< 1.1.0-1+deb11u1exfatprogs_1.1.0-1+deb11u1_all.deb
Debian999allexfatprogs< 1.2.2-1exfatprogs_1.2.2-1_all.deb
Debian13allexfatprogs< 1.2.2-1exfatprogs_1.2.2-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	exfatprogs	< 1.2.0-1+deb12u1	exfatprogs_1.2.0-1+deb12u1_all.deb
Debian	11	all	exfatprogs	< 1.1.0-1+deb11u1	exfatprogs_1.1.0-1+deb11u1_all.deb
Debian	999	all	exfatprogs	< 1.2.2-1	exfatprogs_1.2.2-1_all.deb
Debian	13	all	exfatprogs	< 1.2.2-1	exfatprogs_1.2.2-1_all.deb