Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-25267
HistoryMar 15, 2023 - 10:15 p.m.

Stack overflow

2023-03-1522:15:00
PRIOn knowledge base
www.prio-n.com
4
gfi kerio connect
buffer overflow
2fasetup
webmail component
authenticated request
primaryemailaddress
nvd

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.7%

An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 (fixed in 10.0.0). There is a stack-based Buffer Overflow in the webmail component’s 2FASetup function via an authenticated request with a long primaryEMailAddress field to the webmail/api/jsonrpc URI.

CPENameOperatorVersion
kerio_connecteq9.4.1 patch1

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.7%

Related for PRION:CVE-2023-25267