Lucene search
+L

63 matches found

Gentoo Linux
Gentoo Linux
•added 2023/10/10 12:00 a.m.•38 views

libcue: Arbitrary Code Execution

Background libcue is a CUE Sheet Parser Library. Description libcue does not check bounds in a loop and suffers from an integer overflow flaw which can be exploited to take over the program. Impact Untrusted CUE sheet files can lead to arbitrary code execution. app-misc/tracker-minerscue uses...

8.8CVSS7.9AI score0.1657EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2023/10/10 12:00 a.m.•30 views

Slackware Linux 15.0 / current libcue Vulnerability (SSA:2023-283-01)

The version of libcue installed on the remote host is prior to 2.2.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-283-01 advisory. - libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds arr...

8.8CVSS8.2AI score0.1657EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2023/10/10 12:00 a.m.•31 views

GLSA-202310-10 : libcue: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202310-10 libcue: Arbitrary Code Execution - libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment ca...

8.8CVSS8.2AI score0.1657EPSS
SaveExploits1References3
OpenVAS
OpenVAS
•added 2023/10/10 12:00 a.m.•11 views

Ubuntu: Security Advisory (USN-6423-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.1657EPSS
SaveExploits1References2
NVD
NVD
•added 2023/10/09 10:15 p.m.•18 views

CVE-2023-43641

libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malicious webpage. Because the file is saved to /Downloads, it ...

8.8CVSS8.7AI score0.1657EPSS
SaveExploits1References10
OSV
OSV
•added 2023/10/09 10:15 p.m.•7 views

DEBIAN-CVE-2023-43641

libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malicious webpage. Because the file is saved to /Downloads, it ...

8.8CVSS8.2AI score0.1657EPSS
SaveExploits1References1
Prion
Prion
•added 2023/10/09 10:15 p.m.•26 views

Out-of-bounds

libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malicious webpage. Because the file is saved to /Downloads, it ...

6.8CVSS8.7AI score0.1657EPSS
SaveExploits1References10Affected Software3
Mend
Mend
•added 2023/10/09 9:01 p.m.•1 views

CVE-2023-43641

libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malicious webpage. Because the file is saved to /Downloads, it ...

8.8CVSS0.1657EPSS
SaveExploits1References16
Vulnrichment
Vulnrichment
•added 2023/10/09 9:01 p.m.•19 views

CVE-2023-43641 libcue vulnerable to out-of-bounds array access

libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malicious webpage. Because the file is saved to /Downloads, it ...

8.8CVSS7.2AI score0.1657EPSS
SaveExploits1References10
Cvelist
Cvelist
•added 2023/10/09 9:01 p.m.•63 views

CVE-2023-43641 libcue vulnerable to out-of-bounds array access

libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malicious webpage. Because the file is saved to /Downloads, it ...

8.8CVSS8.9AI score0.1657EPSS
SaveExploits1References10
Debian CVE
Debian CVE
•added 2023/10/09 9:01 p.m.•101 views

CVE-2023-43641

libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malicious webpage. Because the file is saved to /Downloads, it ...

8.8CVSS8.8AI score0.1657EPSS
SaveExploits1
CVE
CVE
•added 2023/10/09 9:01 p.m.•472 views

CVE-2023-43641

CVE-2023-43641 affects libcue, a library for parsing CUE sheets. Versions

8.8CVSS8.7AI score0.1657EPSS
SaveExploits1References10Affected Software1
AlpineLinux
AlpineLinux
•added 2023/10/09 9:01 p.m.•124 views

CVE-2023-43641

libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malicious webpage. Because the file is saved to /Downloads, it ...

8.8CVSS8.8AI score0.1657EPSS
SaveExploits1References13
OSV
OSV
•added 2023/10/09 9:01 p.m.•24 views

CVE-2023-43641 libcue vulnerable to out-of-bounds array access

libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malicious webpage. Because the file is saved to /Downloads, it ...

8.8CVSS9AI score
SaveExploits0References12
OSV
OSV
•added 2023/10/09 5:24 p.m.•8 views

USN-6423-1 libcue vulnerability

It was discovered that CUE incorrectly handled certain files. An attacker could possibly use this issue to expose sensitive information or execute arbitrary code...

8.8CVSS6AI score0.1657EPSS
SaveExploits1References2
Ubuntu
Ubuntu
•added 2023/10/09 5:24 p.m.•55 views

USN-6423-1: CUE vulnerability

It was discovered that CUE incorrectly handled certain files. An attacker could possibly use this issue to expose sensitive information or execute arbitrary code...

8.8CVSS8.4AI score0.1657EPSS
SaveExploits1
UbuntuCve
UbuntuCve
•added 2023/10/09 5:00 p.m.•30 views

CVE-2023-43641

libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malicious webpage. Because the file is saved to /Downloads, it ...

8.8CVSS7.3AI score0.1657EPSS
SaveExploits1References3
OSV
OSV
•added 2023/10/09 5:00 p.m.•15 views

UBUNTU-CVE-2023-43641

libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malicious webpage. Because the file is saved to /Downloads, it ...

8.8CVSS5.9AI score0.1657EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/10/09 12:00 a.m.•43 views

libcue buffer error vulnerability

libcue is a CUE table parser library by the individual developer Ilya Lipnitskiy. A buffer error vulnerability exists in libcue version 2.2.1 and earlier. An attacker can exploit this vulnerability to execute arbitrary code...

8.8CVSS7.6AI score0.1657EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/09 12:00 a.m.•1 views

CVE-2023-43641: Out-of-bounds Write

libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malicious webpage. Because the file is saved to /Downloads, it ...

8.8CVSS8AI score0.1657EPSS
SaveExploits1References2
Rows per page
Query Builder