CVE-2023-33023
CVSS 3.1 Score 8.4 of 10 (high)
Details
Published Apr 1, 2024
Updated: Apr 12, 2024
CWE ID 120
Summary
CVE-2023-33023 is a newly identified memory corruption vulnerability. It is triggered during the processing of the "finish_sign" command, which passes a rsp buffer. This issue can result in unintended modification of memory, potentially leading to code execution or denial-of-service attacks. Attackers can exploit this vulnerability to gain unauthorized access or cause system instability. To mitigate this risk, it is recommended that affected systems be updated with the latest patches as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share