CVE-2023-26257

HIGH7.5

An issue was discovered in the Connected Vehicle Systems Alliance (COVESA; formerly GENIVI) dlt-daemon through 2

Published Feb 27, 2023

Modified 1 years ago

Details

An issue was discovered in the Connected Vehicle Systems Alliance (COVESA; formerly GENIVI) dlt-daemon through 2.18.8. Dynamic memory is not released after it is allocated in dlt-control-common.c.

References

WEB

https://github.com/COVESA/dlt-daemon/issues/440

WEB

https://github.com/COVESA/dlt-daemon/pull/441/commits/b6149e203f919c899fefc702a17fbb78bdec3700

WEB

https://lists.debian.org/debian-lts-announce/2024/06/msg00021.html

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2023-26257

CVSS Analysis

CVSS v3.1

7.5

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Ecosystems

Timeline

PublishedFeb 27, 2023

ModifiedAug 2, 2024