Buffer overflow

2023-03-2921:15:00

PRIOn knowledge base

www.prio-n.com

rocket software

unidata

universe

buffer overflow

api function

security vulnerability

valid login

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.3%

JSON

Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a buffer overflow in an API function, where a string is copied into a caller-provided buffer without checking the length. This requires a valid login to exploit.

CPENameOperatorVersion
unidatale8.2.4
universele11.3.5
universege12.0.0
universele12.2.1

Name	Operator	Version
unidata	le	8.2.4
universe	le	11.3.5
universe	ge	12.0.0
universe	le	12.2.1

References

www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/