CVE-2023-3433

CVSS V2 None CVSS V3 None

Description

The "nickname" field within Savoir-faire Linux's Jami application is susceptible to a failed state when a user inserts special characters into the field. When present, these special characters, make it so the application cannot create the signature for the user and results in a local denial of service to the application.

Overview

CVE ID
CVE-2023-3433

Assigner
BLSOPS

Vulnerability Status
PUBLISHED

Published Version
2023-07-14T12:28:53.363Z

Last Modified Date
2023-07-14T12:28:53.363Z

Weakness Enumerations

CWE	URL
CWE-20	http://cwe.mitre.org/data/definitions/20.html

References

Reference URL	Reference Tags
https://review.jami.net/c/jami-daemon/+/23575
https://git.jami.net/savoirfairelinux/jami-client-qt/-/wikis/Changelog#nightly-january-10
https://blog.blacklanternsecurity.com/p/Jami-Local-Denial-Of-Service-and-QRC-Handler-Vulnerabilities

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-3433
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3433

History

Created	Old Value	New Value	Data Type	Notes
2024-06-24 20:55:07				Added to TrackCVE