Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:46081
HistoryMar 29, 2024 - 9:14 a.m.

Heap-based Buffer Overflow

2024-03-2909:14:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
heap-based buffer overflow
azure c sdk
inadequate parameter checking
remote code execution

CVSS3

6

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L

AI Score

7.5

Confidence

High

EPSS

0

Percentile

9.0%

azure-c-shared-utility is vulnerable to Heap-based Buffer Overflow. The vulnerability is due to inadequate parameter checking mechanisms, which can be exploited through the buffer length parameter in the Azure C SDK, potentially leading to remote code execution.

CVSS3

6

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L

AI Score

7.5

Confidence

High

EPSS

0

Percentile

9.0%