CVE-2023-28505

Published: Mar 29, 2023Modified: Feb 18, 2025

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a buffer overflow in an API function, where a string is copied into a caller-provided buffer without checking the length. This requires a valid login to exploit.

Affected (3)

Products: Rocketsoftware: Unidata, Universe

2 products

Configuration A

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Rocketsoftware Unidata	Up to 8.2.4
Rocketsoftware Universe	Up to 11.3.5
Rocketsoftware Universe	From 12.0.0 to 12.2.1

Running on/with	Platform Versions
Linux Linux Kernel	All versions

Related CWEs

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (2)

https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/

Source: cve@rapid7.com

Third Party Advisory

https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.