Lucene search
HistoryJun 07, 2023 - 8:15 a.m.
CVE-2023-1388
heap-based
overflow
ta
version 5.7.9
remote user
alter
macmnsvc process
memory block
service unavailable
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
AI Score
6.9
Confidence
High
EPSS
0.001
Percentile
47.9%
A heap-based overflow vulnerability in TA prior to version 5.7.9 allows a remote user to alter the page heap in the macmnsvc process memory block, resulting in the service becoming unavailable.
Affected configurations
Node
trellixagentRange<5.7.9
Related
cve
cve
CVE-2023-1388
2023-06-07 08:15:10
prion
prion
Heap overflow
2023-06-07 08:15:00
cvelist
cvelist
CVE-2023-1388
2023-06-07 07:32:52
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
AI Score
6.9
Confidence
High
EPSS
0.001
Percentile
47.9%
Related for NVD:CVE-2023-1388