CVE-2016-10253

Description

An issue was discovered in Erlang/OTP 18.x. Erlangs generation of compiled regular expressions is vulnerable to a heap overflow. Regular expressions using a malformed extpattern can indirectly specify an offset that is used as an array index. This ordinal permits arbitrary regions within the erts_alloc arena to be both read and written to.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.513

Associated Vulnerability

Vulnerability	OS Platform
Concurrent, real-time, distributed functional language (USN-3571-1) erlang_18.3-dfsg-1ubuntu3.1_all.deb	Linux
Concurrent, real-time, distributed functional language (USN-3571-1) erlang_16.b.3-dfsg-1ubuntu2.2_all.deb	Linux
Concurrent, real-time, distributed functional language (USN-3571-1) erlang_20.0.4+dfsg-1ubuntu1.1_all.deb	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234