Linux Distros Unpatched Vulnerability : CVE-2023-37578

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple use-after-free vulnerabilities exist in the VCD getvartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitra...

CVE-2023-37578

creationtimestamp| type| source ---|---|--- 2024-01-08 16:32:01+00:00| seen| https://t.me/ctinow/164451...

CVE-2023-37578

GTKWave 3.3.115 contains multiple use-after-free bugs in the VCD get_vartoken realloc path, triggered by malformed .vcd files (notably via vcd2lxt), which can lead to arbitrary code execution. Debian/DSA-5653 and related advisories note these CVEs (including CVE-2023-37578) and fix them by upgrad...

CVE-2023-37578

Multiple use-after-free vulnerabilities exist in the VCD getvartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

GTKWave VCD get_vartoken realloc use-after-free vulnerabilities

Talos Vulnerability Report TALOS-2023-1806 GTKWave VCD getvartoken realloc use-after-free vulnerabilities January 8, 2024 CVE Number CVE-2023-37576,CVE-2023-37577,CVE-2023-37573,CVE-2023-37578,CVE-2023-37575,CVE-2023-37574 SUMMARY Multiple use-after-free vulnerabilities exist in the VCD getvartok...