Connected Vehicle Systems Alliance (COVESA) up to v2.18.8 was discovered to contain a buffer overflow via the component /shared/dlt_common.c.
References
Configurations
History
21 Nov 2024, 08:09
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/COVESA/dlt-daemon/issues/436 - Exploit, Issue Tracking | |
| References | () https://github.com/michael-methner/dlt-daemon/commit/8ac9a080bee25e67e49bd138d81c992ce7b6d899 - Patch | |
| References | () https://lists.debian.org/debian-lts-announce/2024/06/msg00021.html - |
27 Jun 2024, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
24 Oct 2023, 23:40
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-120 | |
| First Time |
Covesa
Covesa dlt-daemon |
|
| References | (MISC) https://github.com/michael-methner/dlt-daemon/commit/8ac9a080bee25e67e49bd138d81c992ce7b6d899 - Patch | |
| References | (MISC) https://github.com/COVESA/dlt-daemon/issues/436 - Exploit, Issue Tracking | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CPE | cpe:2.3:a:covesa:dlt-daemon:*:*:*:*:*:*:*:* |
21 Oct 2023, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Connected Vehicle Systems Alliance (COVESA) up to v2.18.8 was discovered to contain a buffer overflow via the component /shared/dlt_common.c. |
17 Oct 2023, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-17 23:15
Updated : 2024-11-21 08:09
NVD link : CVE-2023-36321
Mitre link : CVE-2023-36321
CVE.ORG link : CVE-2023-36321
JSON object : View
Products Affected
covesa
- dlt-daemon
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')