Design/Logic Flaw

2023-08-3017:15:00

PRIOn knowledge base

www.prio-n.com

splunk

enterprise

vulnerability

denial of service

printf

logic flaw

0.0005 Low

EPSS

Percentile

17.0%

JSON

In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can use the printf SPL function to perform a denial of service (DoS) against the Splunk Enterprise instance.

CPENameOperatorVersion
splunkeq9.1.0
splunkge8.2.0
splunklt8.2.12
splunkge9.0.0
splunklt9.0.6
splunk_cloud_platformle9.0.2305.100

Name	Operator	Version
splunk	eq	9.1.0
splunk	ge	8.2.0
splunk	lt	8.2.12
splunk	ge	9.0.0
splunk	lt	9.0.6
splunk_cloud_platform	le	9.0.2305.100

References

advisory.splunk.com/advisories/SVD-2023-0803

research.splunk.com/application/78b48d08-075c-4eac-bd07-e364c3780867/

0.0005 Low

EPSS

Percentile

17.0%

JSON

Related for PRION:CVE-2023-40594