Lucene search
HistoryMay 02, 2024 - 1:23 p.m.
CVE-2023-28798
heap write
pacparser library
zscaler client connector
mac
arbitrary code execution
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
7.7 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
An out-of-bounds write to heap in the pacparser library on Zscaler Client Connector on Mac may lead to arbitrary code execution.
CNA Affected
[
{
"defaultStatus": "unaffected",
"platforms": [
"MacOS"
],
"product": "Client Connector",
"vendor": "Zscaler",
"versions": [
{
"lessThan": "3.7.0.172",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]Related
cvelist
cvelist
CVE-2023-28798 Out-of-bounds write to heap in pacparser
2024-05-02 13:10:31
vulnrichment
vulnrichment
CVE-2023-28798 Out-of-bounds write to heap in pacparser
2024-05-02 13:10:31
nvd
nvd
CVE-2023-28798
2024-05-02 13:23:05
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
7.7 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Related for CVE-2023-28798