CVE-2023-33551 | Vulnetix

CVE-2023-33551 PUBLISHED CVSS 9.300000190734863 CRITICAL

Heap Buffer Overflow in the erofsfsck_dirent_iter function in fsck/main.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image.

EPSS 0.82% · 55.7th percentile

Risk Scores

CVSS 4.0

9.300000190734863

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS Score

0.82%

55.7th percentile

Affected Products

Vendor	Product	Versions
erofs-utils_project	erofs-utils	1.6, 1.6
n/a	n/a	n/a, n/a

Timeline

Jun 1, 2023 CVE Published
Jun 2, 2023 EPSS Score
Jul 9, 2023 EPSS Score
Sep 20, 2023 EPSS Score
Oct 26, 2023 EPSS Score
Dec 2, 2023 EPSS Score
Feb 13, 2024 EPSS Score
Mar 21, 2024 EPSS Score
Apr 27, 2024 EPSS Score
Jun 2, 2024 EPSS Score
Aug 14, 2024 EPSS Score
Sep 20, 2024 EPSS Score

References

FEDORA-2023-f838326992 vendor-advisory
FEDORA-2023-aadd651a30 vendor-advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-33551 advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGGIYW7PHYQM2NPYCJPSPSLULLD2P2PE url
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IGGIYW7PHYQM2NPYCJPSPSLULLD2P2PE url
https://github.com/lometsj/blog_repo/issues/2 discussion
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHOIRL6XH5NYR3LYI3KP5DE4SDSQWR7W url
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FHOIRL6XH5NYR3LYI3KP5DE4SDSQWR7W url

Open in Interactive Console →