Lucene search
HistoryJan 08, 2024 - 3:15 p.m.
CVE-2023-38583
buffer overflow
gtkwave
arbitrary code execution
malicious file
vulnerability
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
23.1%
A stack-based buffer overflow vulnerability exists in the LXT2 lxt2_rd_expand_integer_to_bits function of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.
Affected configurations
Node
tonybybellgtkwaveMatch3.3.115
| Vendor | Product | Version | CPE |
|---|---|---|---|
| tonybybell | gtkwave | 3.3.115 | cpe:2.3:a:tonybybell:gtkwave:3.3.115:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2023-38583
2024-01-08 15:15:19
ubuntucve
ubuntucve
CVE-2023-38583
2024-01-08 00:00:00
cvelist
cvelist
CVE-2023-38583
2024-01-08 14:47:39
debiancve
debiancve
CVE-2023-38583
2024-01-08 15:15:19
veracode
veracode
Arbitrary Code Execution
2024-04-03 13:02:28
prion
prion
Stack overflow
2024-01-08 15:15:00
cnvd
cnvd
GTKWave buffer overflow vulnerability (CNVD-2024-04842)
2024-01-11 00:00:00
talos
talos
openvas
openvas
Fedora: Security Advisory for gtkwave (FEDORA-2024-c990070fa4)
2024-01-18 00:00:00
Debian: Security Advisory (DSA-5653-1)
2024-04-04 00:00:00
Debian: Security Advisory (DLA-3785-1)
2024-04-10 00:00:00
debian
debian
[SECURITY] [DSA 5653-1] gtkwave security update
2024-04-03 18:58:39
[SECURITY] [DLA 3785-1] gtkwave security update
2024-04-09 20:24:24
osv
osv
gtkwave - security update
2024-04-03 00:00:00
gtkwave - security update
2024-04-09 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: gtkwave-3.3.118-1.fc39
2024-01-18 01:47:12
[SECURITY] Fedora 38 Update: gtkwave-3.3.118-1.fc38
2024-01-18 01:26:33
nessus
nessus
Debian dla-3785 : gtkwave - security update
2024-04-10 00:00:00
Debian dsa-5653 : gtkwave - security update
2024-04-03 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
23.1%
Related for NVD:CVE-2023-38583