CVE-2023-33023

CVSS 3.1 Score 8.4 of 10 (high)

Details

Published Apr 1, 2024
Updated: Apr 12, 2024
CWE ID 120

Summary

CVE-2023-33023 is a newly identified memory corruption vulnerability. It is triggered during the processing of the "finish_sign" command, which passes a rsp buffer. This issue can result in unintended modification of memory, potentially leading to code execution or denial-of-service attacks. Attackers can exploit this vulnerability to gain unauthorized access or cause system instability. To mitigate this risk, it is recommended that affected systems be updated with the latest patches as soon as possible.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share