Lucene search
HistoryFeb 17, 2023 - 6:15 p.m.
CVE-2023-24785
giorgio tani; peazip; denial of service; unpea.
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
5.4 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
12.7%
An issue in Giorgio Tani peazip v.9.0.0 allows attackers to cause a denial of service via the End of Archive tag function of the peazip/pea UNPEA feature.
Affected configurations
Node
peazip_projectpeazipMatch9.0.0
References
Related
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0124)
2023-04-07 00:00:00
openSUSE: Security Advisory for peazip (openSUSE-SU-2023:0071-1)
2024-03-04 00:00:00
nessus
nessus
openSUSE 15 Security Update : peazip (openSUSE-SU-2023:0071-1)
2023-03-15 00:00:00
cve
cve
CVE-2023-24785
2023-02-17 18:15:12
mageia
mageia
Updated peazip packages fix security vulnerability
2023-04-07 00:20:12
cvelist
cvelist
CVE-2023-24785
2023-02-17 00:00:00
prion
prion
Design/Logic Flaw
2023-02-17 18:15:00
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
5.4 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
12.7%
Related for NVD:CVE-2023-24785