Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-2798
HistoryMay 25, 2023 - 12:00 a.m.

CVE-2023-2798

2023-05-2500:00:00
ubuntu.com
ubuntu.com
7
cve-2023-2798
denial of service
htmlunit
web pages
stack overflow
security issue
unix

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

38.1%

Those using HtmlUnit to browse untrusted webpages may be vulnerable to
Denial of service attacks (DoS). If HtmlUnit is running on user supplied
web pages, an attacker may supply content that causes HtmlUnit to crash by
a stack overflow. This effect may support a denial of service attack.This
issue affects htmlunit before 2.70.0.

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

38.1%