Lucene search
HistoryMar 22, 2023 - 5:15 p.m.
CVE-2023-27754
vox2mesh stack-overflow denial of service crafted file memcpy function
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
12.9%
vox2mesh 1.0 has stack-overflow in main.cpp, this is stack-overflow caused by incorrect use of memcpy() funciton. The flow allows an attacker to cause a denial of service (abort) via a crafted file.
Affected configurations
Node
vox2mesh_projectvox2meshMatch1.0
Related
prion
prion
Stack overflow
2023-03-22 17:15:00
cve
cve
CVE-2023-27754
2023-03-22 17:15:15
cvelist
cvelist
CVE-2023-27754
2023-03-22 00:00:00
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
12.9%
Related for NVD:CVE-2023-27754