Lucene search

GoogleOSV:CVE-2023-40781

HistoryAug 28, 2023 - 10:15 p.m.

CVE-2023-40781

2023-08-2822:15:09

Google

osv.dev

cve-2023-40781

denial of service

remote attacker

libming

.swf file

makeswf function

software

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.8%

JSON

Buffer Overflow vulnerability in Libming Libming v.0.4.8 allows a remote attacker to cause a denial of service via a crafted .swf file to the makeswf function.

CPENameOperatorVersion
libmingeqming-0_3_beta2
libmingeqming-0_4_5
libmingeqming-0_4_0_beta4
libmingeqming-0_3_0
libmingeqming-0_4_6
libmingeqming-0_4_4
libmingeqming-0_4_3
libmingeqming-0_4_8
libmingeqming-0_4_0_beta5
libmingeqming-0_4_0_rc1

Name	Operator	Version
libming	eq	ming-0_3_beta2
libming	eq	ming-0_4_5
libming	eq	ming-0_4_0_beta4
libming	eq	ming-0_3_0
libming	eq	ming-0_4_6
libming	eq	ming-0_4_4
libming	eq	ming-0_4_3
libming	eq	ming-0_4_8
libming	eq	ming-0_4_0_beta5
libming	eq	ming-0_4_0_rc1

Rows per page:

1-10 of 131

References

github.com/libming/libming/issues/288

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.8%

JSON

Related for OSV:CVE-2023-40781