CVE-2023-28506: Stack buffer overflow in UniRPC service
Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buffer overflow, where a string is copied into a buffer using a memcpy-like function and a user-provided length. This requires a valid login to exploit.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-28506?
CVE-2023-28506 is classified as a moderate severity vulnerability due to its potential impact through a stack-based buffer overflow.
How do I fix CVE-2023-28506?
To fix CVE-2023-28506, upgrade to Rocket Software UniData version 8.2.4 build 3003 or UniVerse version 11.3.5 build 1001 or 12.2.1 build 2002.
What types of attacks can exploit CVE-2023-28506?
CVE-2023-28506 can be exploited by attackers with valid login credentials to execute arbitrary code on the affected systems.
Which versions of Rocket Software are affected by CVE-2023-28506?
CVE-2023-28506 affects Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 and 12.2.1 build 2002.
Is a valid login required for exploiting CVE-2023-28506?
Yes, a valid login is required to exploit the buffer overflow vulnerability indicated by CVE-2023-28506.