CVE-2023-28508CWE-120

Heap corruption in UniRPC service

published March 29, 2023

CVSS
—
EPSS
1%
Percentile
59.2
In the wild
Unconfirmed
What it is

Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a heap-based overflow vulnerability, where certain input can corrupt the heap and crash the forked process.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00897 · 59.2th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2023-03-29T20:16Z
EPSS history
Timeline
  • 29 MAR 20:16Z
    Heap corruption in UniRPC service
    cvelistv5