CVE-2023-20635

MEDIUM Year: 2023
CVSS v3 Score
4.4
Medium
Weakness Type
CWE-191
View all →

Vulnerability Description

In keyinstall, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07563028; Issue ID: ALPS07563028.

Related Vulnerabilities

CVE-2023-24911

MEDIUM
CVSS:4.3(Medium)

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CWE-1912023

CVE-2024-50594

MEDIUM
CVSS:4.3(Medium)

An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted series of network requests can lead to denial o...

CWE-1912024

CVE-2024-50595

MEDIUM
CVSS:4.3(Medium)

An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted series of network requests can lead to denial o...

CWE-1912024

CVE-2024-50596

MEDIUM
CVSS:4.3(Medium)

An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. A...

CWE-1912024

CVE-2024-50597

MEDIUM
CVSS:4.3(Medium)

An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted network packet can lead to denial of service. A...

CWE-1912024

CVE-2024-5256

MEDIUM
CVSS:4.3(Medium)

Sonos Era 100 SMB2 Message Handling Integer Underflow Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installat...

CWE-1912024