CVE-2023-52339 - Vulnerability Details - OpenCVE

In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or writing. It may result in buffer overflows.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Matroska	Libebml

Configuration 1 [-]

cpe:2.3:a:matroska:libebml:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://github.com/Matroska-Org/libebml/blob/v1.x/NEWS.md
https://github.com/Matroska-Org/libebml/compare/release-1.4.4...release-1.4.5
https://github.com/Matroska-Org/libebml/issues/147
https://github.com/Matroska-Org/libebml/pull/148
https://lists.debian.org/debian-lts-announce/2025/01/msg00016.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BJUXVOIRWPP7OFYUKQZDNJTSLWCPIZBH/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XNANFT4P6KL4WDQ3TV6QQ44NSC7WKLAB/

History

Mon, 20 Jan 2025 16:45:00 +0000

Type	Values Removed	Values Added
References		https://lists.debian.org/debian-lts-announce/2025/01/msg00016.html

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-01-12T00:00:00

Updated: 2025-01-20T16:03:15.440Z

Reserved: 2024-01-12T00:00:00

Link: CVE-2023-52339

Vulnrichment

No data.

NVD

Status : Modified

Published: 2024-01-12T02:15:44.637

Modified: 2025-01-20T16:15:26.810

Link: CVE-2023-52339

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2023-52339", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2025-01-20T16:03:15.440Z", "dateReserved": "2024-01-12T00:00:00", "datePublished": "2024-01-12T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-02-05T03:06:21.730380"}, "descriptions": [{"lang": "en", "value": "In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or writing. It may result in buffer overflows."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://github.com/Matroska-Org/libebml/issues/147"}, {"url": "https://github.com/Matroska-Org/libebml/pull/148"}, {"url": "https://github.com/Matroska-Org/libebml/blob/v1.x/NEWS.md"}, {"url": "https://github.com/Matroska-Org/libebml/compare/release-1.4.4...release-1.4.5"}, {"name": "FEDORA-2024-ab879eeed1", "tags": ["vendor-advisory"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BJUXVOIRWPP7OFYUKQZDNJTSLWCPIZBH/"}, {"name": "FEDORA-2024-7261a9f668", "tags": ["vendor-advisory"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XNANFT4P6KL4WDQ3TV6QQ44NSC7WKLAB/"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/Matroska-Org/libebml/issues/147", "tags": ["x_transferred"]}, {"url": "https://github.com/Matroska-Org/libebml/pull/148", "tags": ["x_transferred"]}, {"url": "https://github.com/Matroska-Org/libebml/blob/v1.x/NEWS.md", "tags": ["x_transferred"]}, {"url": "https://github.com/Matroska-Org/libebml/compare/release-1.4.4...release-1.4.5", "tags": ["x_transferred"]}, {"name": "FEDORA-2024-ab879eeed1", "tags": ["vendor-advisory", "x_transferred"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BJUXVOIRWPP7OFYUKQZDNJTSLWCPIZBH/"}, {"name": "FEDORA-2024-7261a9f668", "tags": ["vendor-advisory", "x_transferred"], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XNANFT4P6KL4WDQ3TV6QQ44NSC7WKLAB/"}, {"url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00016.html"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-01-20T16:03:15.440Z"}}]}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:matroska:libebml:*:*:*:*:*:*:*:*", "matchCriteriaId": "E313D822-BEBC-43B6-BDA3-8221A80B66C6", "versionEndExcluding": "1.4.5", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or writing. It may result in buffer overflows."}, {"lang": "es", "value": "En libebml anterior a 1.4.5, puede ocurrir un desbordamiento de enteros en MemIOCallback.cpp al leer o escribir. Puede provocar desbordamientos de b\u00fafer."}], "id": "CVE-2023-52339", "lastModified": "2025-01-20T16:15:26.810", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-01-12T02:15:44.637", "references": [{"source": "cve@mitre.org", "tags": ["Release Notes"], "url": "https://github.com/Matroska-Org/libebml/blob/v1.x/NEWS.md"}, {"source": "cve@mitre.org", "tags": ["Release Notes"], "url": "https://github.com/Matroska-Org/libebml/compare/release-1.4.4...release-1.4.5"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://github.com/Matroska-Org/libebml/issues/147"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "https://github.com/Matroska-Org/libebml/pull/148"}, {"source": "cve@mitre.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BJUXVOIRWPP7OFYUKQZDNJTSLWCPIZBH/"}, {"source": "cve@mitre.org", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XNANFT4P6KL4WDQ3TV6QQ44NSC7WKLAB/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes"], "url": "https://github.com/Matroska-Org/libebml/blob/v1.x/NEWS.md"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes"], "url": "https://github.com/Matroska-Org/libebml/compare/release-1.4.4...release-1.4.5"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://github.com/Matroska-Org/libebml/issues/147"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/Matroska-Org/libebml/pull/148"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00016.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BJUXVOIRWPP7OFYUKQZDNJTSLWCPIZBH/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XNANFT4P6KL4WDQ3TV6QQ44NSC7WKLAB/"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-190"}], "source": "nvd@nist.gov", "type": "Primary"}]}