PT-2023-28587 · Unknown · Moonlight-Common-C

🗓️ 14 Dec 2023 00:00:00Reported by Positive TechnologiesType

Moonlight-common-c before commit 24750d4b748fefa03d09fcfd6d45056faca354e0 has a buffer overflow risk enabling remote code execution.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-42800	21 Dec 202321:16	–	circl
CNNVD	Moonlight-common-c Security Vulnerability	14 Dec 202300:00	–	cnnvd
CVE	CVE-2023-42800	14 Dec 202316:57	–	cve
Cvelist	CVE-2023-42800 Buffer overflow due to use of `strcpy` in `performRtspHandshake`	14 Dec 202316:57	–	cvelist
EUVD	EUVD-2023-47227	3 Oct 202520:07	–	euvd
FreeBSD	moonlight-embedded -- multiple vulnerabilities	11 Jan 202200:00	–	freebsd
NVD	CVE-2023-42800	14 Dec 202317:15	–	nvd
OSV	CVE-2023-42800 Buffer overflow due to use of `strcpy` in `performRtspHandshake`	14 Dec 202316:57	–	osv
Prion	Buffer overflow	14 Dec 202317:15	–	prion
RedhatCVE	CVE-2023-42800	23 May 202502:00	–	redhatcve

Source	Link
github	www.github.com/moonlight-stream/moonlight-common-c/security/advisories/GHSA-4927-23jw-rq62
github	www.github.com/moonlight-stream/moonlight-common-c/commit/24750d4b748fefa03d09fcfd6d45056faca354e0
github	www.github.com/moonlight-stream/moonlight-common-c/commit/50c0a51b10ecc5b3415ea78c21d96d679e2288f9
osv	www.osv.dev/vulnerability/CVE-2023-42800
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-42800
github	www.github.com/moonlight-stream/moonlight-common-c/blob/2bb026c763fc18807d7e4a93f918054c488f84e1/src/RtspConnection.c
twitter	www.twitter.com/VulmonFeeds/status/1735383186522181885
t	www.t.me/cvenotify/64697
t	www.t.me/cvenotify/63723
twitter	www.twitter.com/CVEnew/status/1735347618358706432

21 Dec 2023 00:00Current

9.2High risk

Vulners AI Score9.2

CVSS 3.18.8

EPSS0.00649

SSVC