Beveiligingsadvies

CVE-2023-31475

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-05-11 00:00:00
Laatst bijgewerkt 2025-01-27 17:17:11
Toegewezen door mitre
CVSS-score 9.0
Status PUBLISHED

Beschrijving

An issue was discovered on GL.iNet devices before 3.216. The function guci2_get() found in libglutil.so has a buffer overflow when an item is requested from a UCI context, and the value is pasted into a char pointer to a buffer without checking the size of the buffer.