CVE-2023-28501: Heap buffer overflow in unirpcd
Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a heap-based buffer overflow in the unirpcd daemon that, if successfully exploited, can lead to remote code execution as the root user.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-28501?
CVE-2023-28501 is a vulnerability in Rocket Software UniData and UniVerse that allows for a heap-based buffer overflow in the unirpcd daemon, potentially leading to remote code execution.
How severe is CVE-2023-28501?
CVE-2023-28501 has a severity rating of 9.8, which is considered critical.
Which versions of Rocket Software UniData are affected?
Rocket Software UniData versions prior to 8.2.4 build 3003 are affected by CVE-2023-28501.
Which versions of Rocket Software UniVerse are affected?
Rocket Software UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 are affected by CVE-2023-28501.
How can CVE-2023-28501 be exploited?
CVE-2023-28501 can be exploited by successfully triggering the heap-based buffer overflow in the unirpcd daemon, potentially allowing for remote code execution as the root user.