CVE-2023-37188

C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_rate_decompress at zfp/blosc2-zfp.c.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/Blosc/c-blosc2/commit/425e8a9a59d49378d57e2116b6c9b0190a5986f5	Patch
https://github.com/Blosc/c-blosc2/compare/v2.9.2...v2.9.3	Release Notes
https://github.com/Blosc/c-blosc2/issues/521	Exploit Issue Tracking Patch Vendor Advisory
https://github.com/Blosc/c-blosc2/commit/425e8a9a59d49378d57e2116b6c9b0190a5986f5	Patch
https://github.com/Blosc/c-blosc2/compare/v2.9.2...v2.9.3	Release Notes
https://github.com/Blosc/c-blosc2/issues/521	Exploit Issue Tracking Patch Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:c-blosc2_project:c-blosc2:*:*:*:*:*:*:*:*

History

21 Nov 2024, 08:11

Type	Values Removed	Values Added
References	~~() https://github.com/Blosc/c-blosc2/commit/425e8a9a59d49378d57e2116b6c9b0190a5986f5 - Patch~~	() https://github.com/Blosc/c-blosc2/commit/425e8a9a59d49378d57e2116b6c9b0190a5986f5 - Patch
References	~~() https://github.com/Blosc/c-blosc2/compare/v2.9.2...v2.9.3 - Release Notes~~	() https://github.com/Blosc/c-blosc2/compare/v2.9.2...v2.9.3 - Release Notes
References	~~() https://github.com/Blosc/c-blosc2/issues/521 - Exploit, Issue Tracking, Patch, Vendor Advisory~~	() https://github.com/Blosc/c-blosc2/issues/521 - Exploit, Issue Tracking, Patch, Vendor Advisory

29 Dec 2023, 18:38

Type	Values Removed	Values Added
First Time		C-blosc2 Project c-blosc2 C-blosc2 Project
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.5
CWE		CWE-476
References	~~() https://github.com/Blosc/c-blosc2/compare/v2.9.2...v2.9.3 -~~	() https://github.com/Blosc/c-blosc2/compare/v2.9.2...v2.9.3 - Release Notes
References	~~() https://github.com/Blosc/c-blosc2/issues/521 -~~	() https://github.com/Blosc/c-blosc2/issues/521 - Exploit, Issue Tracking, Patch, Vendor Advisory
References	~~() https://github.com/Blosc/c-blosc2/commit/425e8a9a59d49378d57e2116b6c9b0190a5986f5 -~~	() https://github.com/Blosc/c-blosc2/commit/425e8a9a59d49378d57e2116b6c9b0190a5986f5 - Patch
CPE		cpe:2.3:a:c-blosc2_project:c-blosc2::::::::

25 Dec 2023, 07:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-12-25 07:15

Updated : 2024-11-21 08:11

NVD link : CVE-2023-37188

Mitre link : CVE-2023-37188

CVE.ORG link : CVE-2023-37188

JSON object : View

Products Affected

c-blosc2_project

c-blosc2

CWE

CWE-476

NULL Pointer Dereference

7.5 /10