Vulnerability Details : CVE-2023-1157
A vulnerability, which was classified as problematic, was found in finixbit elf-parser. Affected is the function elf_parser::Elf_parser::get_segments of the file elf_parser.cpp. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. VDB-222222 is the identifier assigned to this vulnerability.
Vulnerability category: Denial of service
Products affected by CVE-2023-1157
- cpe:2.3:a:elf-parser_project:elf-parser:-:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2023-1157
0.08%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 37 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-1157
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
1.7
|
LOW | AV:L/AC:L/Au:S/C:N/I:N/A:P |
3.1
|
2.9
|
VulDB | |
|
2.8
|
LOW | CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L |
1.3
|
1.4
|
VulDB | |
|
2.8
|
LOW | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L |
1.3
|
1.4
|
VulDB | 2024-02-29 |
|
5.5
|
MEDIUM | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
1.8
|
3.6
|
NIST |
CWE ids for CVE-2023-1157
-
The product does not release or incorrectly releases a resource before it is made available for re-use.Assigned by:
- cna@vuldb.com (Secondary)
- nvd@nist.gov (Primary)
References for CVE-2023-1157
-
https://vuldb.com/?id.222222
Login requiredThird Party Advisory
-
https://github.com/10cksYiqiyinHangzhouTechnology/elf-parser_segments_poc
GitHub - 10cksYiqiyinHangzhouTechnology/elf-parser_segments_pocExploit;Third Party Advisory
-
https://vuldb.com/?ctiid.222222
Permissions Required;Third Party Advisory
Jump to