CVE-2023-29414CWE-120

A CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow) vulnerability exists that could cause user privilege escalation if a local user…

High · published July 12, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
7.4
In the wild
Unconfirmed
What it is

A CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow) vulnerability

exists that could cause user privilege escalation if a local user sends specific string input to a

local function call.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00183 · 7.4th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2023-07-12T08:18Z
EPSS history
Timeline
  • 12 JUL 08:18Z
    A CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow) vulnerability exists that could cause user privilege escalation if a local user…
    cvelistv5