CVE-2023-52267
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-52267 is a cyber vulnerability that affects ehttp version 1.0.6 before 17405b9. The vulnerability, identified as CWE-125 (Out-of-bounds Read), occurs during error logging for long strings in the simple_log.cpp file. It has a base severity of HIGH with a CVSS v3.1 base score of 7.5. The exploitability score is 3.9, and the impact score is 3.6. This vulnerability does not require any privileges and does not involve user interaction, making it an attractive target for attackers over the network. While it has no impact on integrity or confidentiality, it poses a high availability risk to affected organizations. To remediate this vulnerability, it is recommended to update ehttp to a version that includes a fix for this issue. Note: The provided information is based on the data extracted from the source but does not include any analysis or opinion from the analyst's perspective.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions