CVE-2023-2789
published 2023-05-18CVE-2023-2789: A vulnerability was found in GNU cflow 1.7. It has been rated as problematic. This issue affects the function func_body/parse_variable_declaration of the file…
PriorityP340high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
1.23%
65.7th percentile
A vulnerability was found in GNU cflow 1.7. It has been rated as problematic. This issue affects the function func_body/parse_variable_declaration of the file parser.c. The manipulation leads to denial of service. The exploit has been disclosed to the public and may be used. The identifier VDB-229373 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | cflow | — | — |
| gnu | cflow | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.02.7LOWAV:A/AC:L/Au:S/C:N/I:N/A:P
osv7.5HIGH
vendor_debian3.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2023-2789: cflow - A vulnerability was found in GNU cflow 1.7. It has been rated as problematic. Th...
vendor_debian·2023·CVSS 3.5
CVE-2023-2789 [LOW] CVE-2023-2789: cflow - A vulnerability was found in GNU cflow 1.7. It has been rated as problematic. Th...
A vulnerability was found in GNU cflow 1.7. It has been rated as problematic. This issue affects the function func_body/parse_variable_declaration of the file parser.c. The manipulation leads to denial of service. The exploit has been disclosed to the public and may be used. The identifier VDB-229373 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
GHSA
GHSA-h6vj-vg8j-jfqp: A vulnerability was found in GNU cflow 1
ghsa_unreviewed·2023-05-18
CVE-2023-2789 [LOW] CWE-404 GHSA-h6vj-vg8j-jfqp: A vulnerability was found in GNU cflow 1
A vulnerability was found in GNU cflow 1.7. It has been rated as problematic. This issue affects the function func_body/parse_variable_declaration of the file parser.c. The manipulation leads to denial of service. The exploit has been disclosed to the public and may be used. The identifier VDB-229373 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
OSV
CVE-2023-2789: A vulnerability was found in GNU cflow 1
osv·2023-05-18·CVSS 7.5
CVE-2023-2789 [HIGH] CVE-2023-2789: A vulnerability was found in GNU cflow 1
A vulnerability was found in GNU cflow 1.7. It has been rated as problematic. This issue affects the function func_body/parse_variable_declaration of the file parser.c. The manipulation leads to denial of service. The exploit has been disclosed to the public and may be used. The identifier VDB-229373 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/DaisyPo/fuzzing-vulncollect/blob/main/cflow/stack-overflow/parser.c/README.mdhttps://github.com/DaisyPo/fuzzing-vulncollect/files/11343936/poc-file.ziphttps://vuldb.com/?ctiid.229373https://vuldb.com/?id.229373https://github.com/DaisyPo/fuzzing-vulncollect/blob/main/cflow/stack-overflow/parser.c/README.mdhttps://github.com/DaisyPo/fuzzing-vulncollect/files/11343936/poc-file.ziphttps://vuldb.com/?ctiid.229373https://vuldb.com/?id.229373
2023-05-18
Published