CVE-2014-9765

Description

Buffer overflow in the main_get_appheader function in xdelta3-main.h in xdelta3 before 3.0.9 allows remote attackers to execute arbitrary code via a crafted input file.

Risk Information

Base Score

8.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

2.475

Associated Vulnerability

Vulnerability	OS Platform
Diff utility which works with binary files (USN-2901-1) xdelta3_3.0.7-dfsg-2ubuntu0.2_i386.deb	Linux
Diff utility which works with binary files (USN-2901-1) xdelta3_3.0.7-dfsg-2ubuntu0.2_amd64.deb	Linux
Diff utility which works with binary files (USN-2901-1) xdelta3_3.0.8-dfsg-1ubuntu0.15.10.2_i386.deb	Linux
Diff utility which works with binary files (USN-2901-1) xdelta3_3.0.8-dfsg-1ubuntu0.15.10.2_amd64.deb	Linux
xdelta3 security update(DSA-3484-1) xdelta3_3.0.0.dfsg-1+deb7u1_i386.deb	Linux
xdelta3 security update(DSA-3484-1) xdelta3_3.0.8-dfsg-1+deb8u1_amd64.deb	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234