Lucene search

K
nvd[email protected]NVD:CVE-2023-37239
HistoryJul 06, 2023 - 1:15 p.m.

CVE-2023-37239

2023-07-0613:15:10
CWE-200
web.nvd.nist.gov
format string
vulnerability
distributed file system
selinux
permission
exploit
crash

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.0005 Low

EPSS

Percentile

17.0%

Format string vulnerability in the distributed file system. Attackers who bypass the selinux permission can exploit this vulnerability to crash the program.

Affected configurations

NVD
Node
huaweiemuiMatch12.0.1
OR
huaweiemuiMatch13.0.0
OR
huaweiharmonyosMatch2.0.1
OR
huaweiharmonyosMatch3.0.0
OR
huaweiharmonyosMatch3.1.0

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.0005 Low

EPSS

Percentile

17.0%

Related for NVD:CVE-2023-37239