Lucene search

GoogleOSV:CVE-2023-3891

HistorySep 15, 2023 - 3:15 a.m.

CVE-2023-3891

2023-09-1503:15:08

Google

osv.dev

cve-2023-3891

lapce v0.2.8

race condition

privilege escalation

system software

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

21.6%

JSON

Race condition in Lapce v0.2.8 allows an attacker to elevate privileges on the system

CPENameOperatorVersion
lapceeq0.0.5
lapceeq0.0.11
lapceeq0.2.5
lapceeq0.0.8
lapceeq0.2.7
lapceeq0.2.2
lapceeq0.0.2
lapceeq0.2.6
lapceeq0.0.4
lapceeq0.2.3

Name	Operator	Version
lapce	eq	0.0.5
lapce	eq	0.0.11
lapce	eq	0.2.5
lapce	eq	0.0.8
lapce	eq	0.2.7
lapce	eq	0.2.2
lapce	eq	0.0.2
lapce	eq	0.2.6
lapce	eq	0.0.4
lapce	eq	0.2.3

Rows per page:

1-10 of 251

References

fluidattacks.com/advisories/aerosmith

lapce.dev

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

21.6%

JSON

Related for OSV:CVE-2023-3891