CVE-2023-45849

An arbitrary code execution which results in privilege escalation was discovered in Helix Core versions prior to 2023.2. Reported by Jason Geffner.

CVE-2023-35767

CVE-2023-35767 affects Perforce Helix Core Server prior to 2023.2. The issue is an unauthenticated remote Denial-of-Service via the rmt-Shutdown RPC command, which can terminate the server and cause a DoS when invoked by anonymous remote users. Public sources in the Connected documents describe t...

CVE-2023-45319

CVE-2023-45319 affects Perforce Helix Core Server prior to 2023.2. It describes an unauthenticated remote Denial of Service via the rmt-UpdtFovrCommit RPC command, caused by an unchecked return/pointer handling path that can lead to a crash when processing RPC data. Connected sources (Red Hat adv...

CVE-2023-5759

CVE-2023-5759 is a Denial-of-Service issue in Perforce Helix Core Server prior to 2023.2. The vulnerability arises from remote handling of the RPC header: an unauthenticated client can specify a large length (up to 0x1FFFFFFE), causing the server to allocate a large memory block and potentially c...