Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-38657
HistoryJan 08, 2024 - 3:15 p.m.

CVE-2023-38657

2024-01-0815:15:22
CWE-119
CWE-787
[email protected]
web.nvd.nist.gov
11
out-of-bounds write
arbitrary code execution
gtkwave
vulnerability
decompression
.lxt2 files

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

23.1%

JSON

An out-of-bounds write vulnerability exists in the LXT2 zlib block decompression functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.

Affected configurations

Nvd
Node
tonybybellgtkwaveMatch3.3.115
VendorProductVersionCPE
tonybybellgtkwave3.3.115cpe:2.3:a:tonybybell:gtkwave:3.3.115:*:*:*:*:*:*:*

Related

cvelist 1
debiancve 1
talos 1
ubuntucve 1
veracode 1
prion 1
cve 1
talosblog 1
openvas 4
osv 2
debian 2
fedora 2
nessus 2
cvelist
cvelist
CVE-2023-38657
2024-01-08 14:47:41
debiancve
debiancve
CVE-2023-38657
2024-01-08 15:15:22
talos
talos
GTKWave LXT2 zlib block decompression out-of-bounds write vulnerability
2024-01-08 00:00:00
ubuntucve
ubuntucve
CVE-2023-38657
2024-01-08 00:00:00
veracode
veracode
Out-of-bounds Write
2024-04-03 15:44:49
prion
prion
Cross site scripting
2024-01-08 15:15:00
cve
cve
CVE-2023-38657
2024-01-08 15:15:22
talosblog
talosblog
Critical vulnerability in ManageEngine could lead to file creation, dozens of other vulnerabilities disclosed by Talos to start 2024
2024-01-17 17:00:00
openvas
openvas
Fedora: Security Advisory for gtkwave (FEDORA-2024-c990070fa4)
2024-01-18 00:00:00
Debian: Security Advisory (DSA-5653-1)
2024-04-04 00:00:00
Debian: Security Advisory (DLA-3785-1)
2024-04-10 00:00:00
osv
osv
gtkwave - security update
2024-04-09 00:00:00
gtkwave - security update
2024-04-03 00:00:00
debian
debian
[SECURITY] [DSA 5653-1] gtkwave security update
2024-04-03 18:58:39
[SECURITY] [DLA 3785-1] gtkwave security update
2024-04-09 20:24:24
fedora
fedora
[SECURITY] Fedora 39 Update: gtkwave-3.3.118-1.fc39
2024-01-18 01:47:12
[SECURITY] Fedora 38 Update: gtkwave-3.3.118-1.fc38
2024-01-18 01:26:33
nessus
nessus
Debian dsa-5653 : gtkwave - security update
2024-04-03 00:00:00
Debian dla-3785 : gtkwave - security update
2024-04-10 00:00:00

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

23.1%

JSON
Related for NVD:CVE-2023-38657
cvelist1debiancve1talos1ubuntucve1veracode1prion1cve1talosblog1openvas4osv2debian2fedora2nessus2