CVE-2023-32716 : In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, an

In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, an attacker can exploit a vulnerability in the {{dump}} SPL command to cause a denial of service by crashing the Splunk daemon.

Published 2023-06-01 17:15:11

Updated 2023-06-07 14:18:33

Source Splunk Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Exploit prediction scoring system (EPSS) score for CVE-2023-32716

EPSS FAQ

0.08%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 32 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-32716

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	2.8	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High
6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	2.8	3.6	Splunk Inc.
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2023-32716

CWE-754 Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2023-32716

Products affected by CVE-2023-32716

Splunk » Splunk » Enterprise Edition
Versions from including (>=) 8.1.0 and before (<) 8.1.14
cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*
Matching versions
Splunk » Splunk » Enterprise Edition
Versions from including (>=) 9.0.0 and before (<) 9.0.5
cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*
Matching versions
Splunk » Splunk » Enterprise Edition
Versions from including (>=) 8.2.0 and before (<) 8.2.11
cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*
Matching versions
Splunk » Splunk Cloud Platform
Versions before (<) 9.0.2303.100
cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2023-32716

Exploit prediction scoring system (EPSS) score for CVE-2023-32716

CVSS scores for CVE-2023-32716

CWE ids for CVE-2023-32716

References for CVE-2023-32716

Products affected by CVE-2023-32716