PT-2023-8235 · Unknown · Moonlight-Common-C

🗓️ 14 Dec 2023 00:00:00Reported by Positive TechnologiesType

Moonlight-common-c buffer overflow before commit b2497a3918a6d79808d9fd0c04734786e70d5954 could enable remote code execution after pairing.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-42801	27 Dec 202323:17	–	circl
CNNVD	Moonlight-common-c Security Vulnerability	14 Dec 202300:00	–	cnnvd
CVE	CVE-2023-42801	14 Dec 202317:02	–	cve
Cvelist	CVE-2023-42801 Stack buffer overflow due to `strcpy` into fixed size buffer in `extractVersionQuadFromString`	14 Dec 202317:02	–	cvelist
EUVD	EUVD-2023-47228	3 Oct 202520:07	–	euvd
FreeBSD	moonlight-embedded -- multiple vulnerabilities	11 Jan 202200:00	–	freebsd
NVD	CVE-2023-42801	14 Dec 202317:15	–	nvd
OSV	CVE-2023-42801 Stack buffer overflow due to `strcpy` into fixed size buffer in `extractVersionQuadFromString`	14 Dec 202317:02	–	osv
Prion	Buffer overflow	14 Dec 202317:15	–	prion
RedhatCVE	CVE-2023-42801	23 May 202501:59	–	redhatcve

Source	Link
github	www.github.com/moonlight-stream/moonlight-common-c/security/advisories/GHSA-f3h8-j898-5h5v
github	www.github.com/moonlight-stream/moonlight-common-c/blob/c1744de06938b5a5c8897a705be1bc6508dc7580/src/Misc.c
github	www.github.com/moonlight-stream/moonlight-common-c/commit/b2497a3918a6d79808d9fd0c04734786e70d5954
github	www.github.com/moonlight-stream/moonlight-common-c/commit/f57bd745b4cbed577ea654fad4701bea4d38b44c
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-42801
bdu	www.bdu.fstec.ru/vul/2024-00265
osv	www.osv.dev/vulnerability/CVE-2023-42801
t	www.t.me/cvenotify/65265
twitter	www.twitter.com/VulmonFeeds/status/1735381920916078848
t	www.t.me/cvenotify/63724

27 Dec 2023 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.6

EPSS0.00361