CVE-2023-28508: falha em Rocket Software UniData
Heap corruption in UniRPC service
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.9%
Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a heap-based overflow vulnerability, where certain input can corrupt the heap and crash the forked process.
CVEs relacionadas — Rocket Software UniData
No mesmo produto, das mais perigosas para as menos.
CVE-2023-28503CRITICALAuthentication bypass in UniRPC's udadmin serviceEPSS 60.7%CVE-2023-28502CRITICALStack buffer overflow in UniRPC's udadmin_server serviceEPSS 59.6%CVE-2023-28504CRITICALStack buffer overflow in UniRPC library functionEPSS 1.4%CVE-2023-28501CRITICALHeap buffer overflow in unirpcdEPSS 1.4%CVE-2023-28507CRITICALMemory exhaustion in LZ4 decompression in UniRPC daemonEPSS 0.9%CVE-2023-28506HIGHStack buffer overflow in UniRPC serviceEPSS 0.9%