Lucene search
TrellixCVELIST:CVE-2023-1388HistoryJun 07, 2023 - 7:32 a.m.
CVE-2023-1388
2023-06-0707:32:52
trellix
www.cve.org
3
cve-2023-1388
remote user
page heap
macmnsvc process
service unavailable
CVSS3
6.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
AI Score
8.3
Confidence
High
EPSS
0.001
Percentile
47.9%
A heap-based overflow vulnerability in TA prior to version 5.7.9 allows a remote user to alter the page heap in the macmnsvc process memory block, resulting in the service becoming unavailable.
CNA Affected
[
{
"defaultStatus": "unaffected",
"platforms": [
"MacOS"
],
"product": "Trellix Agent",
"vendor": "Trellix",
"versions": [
{
"status": "affected",
"version": "5.7.8"
}
]
}
]Related
prion
prion
Heap overflow
2023-06-07 08:15:00
nvd
nvd
CVE-2023-1388
2023-06-07 08:15:10
cve
cve
CVE-2023-1388
2023-06-07 08:15:10
CVSS3
6.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
AI Score
8.3
Confidence
High
EPSS
0.001
Percentile
47.9%
Related for CVELIST:CVE-2023-1388