Lucene search
HistoryAug 15, 2023 - 5:15 p.m.
CVE-2023-38852
buffer overflow
libxlsv
remote code execution
denial of service
xls file
unicode_decode_wcstombs
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
6.9
Confidence
High
EPSS
0.003
Percentile
68.5%
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the unicode_decode_wcstombs function in xlstool.c:266.
Affected configurations
Node
libxls_projectlibxlsMatch1.6.2
Related
debiancve
debiancve
CVE-2023-38852
2023-08-15 17:15:10
openvas
openvas
Fedora: Security Advisory for libxls (FEDORA-2024-8b67e47e43)
2024-02-27 00:00:00
Fedora: Security Advisory (FEDORA-2024-e74783429c)
2024-02-27 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: libxls-1.6.2-14.fc39
2024-02-27 01:09:34
[SECURITY] Fedora 38 Update: libxls-1.6.2-14.fc38
2024-02-27 01:45:42
prion
prion
Buffer overflow
2023-08-15 17:15:00
nessus
nessus
Fedora 39 : libxls (2024-e74783429c)
2024-02-27 00:00:00
Fedora 38 : libxls (2024-8b67e47e43)
2024-02-27 00:00:00
osv
osv
CVE-2023-38852
2023-08-15 17:15:10
ubuntucve
ubuntucve
CVE-2023-38852
2023-08-15 00:00:00
cvelist
cvelist
CVE-2023-38852
2023-08-15 00:00:00
cve
cve
CVE-2023-38852
2023-08-15 17:15:10
redhatcve
redhatcve
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
6.9
Confidence
High
EPSS
0.003
Percentile
68.5%
Related for NVD:CVE-2023-38852