Lucene search

GoogleOSV:CVE-2023-41268

HistoryDec 06, 2023 - 4:15 a.m.

CVE-2023-41268

2023-12-0604:15:07

Google

osv.dev

samsung escargot

input validation

stack overflow

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.8%

JSON

Improper input validation vulnerability in Samsung Open Source Escargot allows stack overflow and segmentation fault. This issue affects Escargot: from 3.0.0 through 4.0.0.

CPENameOperatorVersion
escargoteq3.0.0
escargoteq2.0.0
escargoteq1.0.0
escargoteq4.0.0

Name	Operator	Version
escargot	eq	3.0.0
escargot	eq	2.0.0
escargot	eq	1.0.0
escargot	eq	4.0.0

References

github.com/Samsung/escargot/pull/1260

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.8%

JSON

Related for OSV:CVE-2023-41268