lockss-daemon up to 1.76.x cleanName unicode encoding

Summaryinfo

A vulnerability was found in lockss-daemon up to 1.76.x. It has been declared as problematic. Affected by this vulnerability is the function cleanName. Such manipulation of the argument Name leads to improper handling of unicode encoding. This vulnerability is uniquely identified as CVE-2023-42183. No exploit exists. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability was found in lockss-daemon up to 1.76.x and classified as problematic. Affected by this issue is the function cleanName. The manipulation of the argument name with an unknown input leads to a improper handling of unicode encoding vulnerability. Using CWE to declare the problem leads to CWE-176. The product does not properly handle when an input contains Unicode encoding. Impacted is integrity.

The weakness was disclosed 12/14/2023. The advisory is shared for download at github.com. This vulnerability is handled as CVE-2023-42183. There are known technical details, but no exploit is available.

Upgrading to version 1.77.3 eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Name

• lockss-daemon

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.15
• 1.16
• 1.17
• 1.18
• 1.19
• 1.20
• 1.21
• 1.22
• 1.23
• 1.24
• 1.25
• 1.26
• 1.27
• 1.28
• 1.29
• 1.30
• 1.31
• 1.32
• 1.33
• 1.34
• 1.35
• 1.36
• 1.37
• 1.38
• 1.39
• 1.40
• 1.41
• 1.42
• 1.43
• 1.44
• 1.45
• 1.46
• 1.47
• 1.48
• 1.49
• 1.50
• 1.51
• 1.52
• 1.53
• 1.54
• 1.55
• 1.56
• 1.57
• 1.58
• 1.59
• 1.60
• 1.61
• 1.62
• 1.63
• 1.64
• 1.65
• 1.66
• 1.67
• 1.68
• 1.69
• 1.70
• 1.71
• 1.72
• 1.73
• 1.74
• 1.75
• 1.76

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion