CVE-2023-45842
CVSS V2 None
CVSS V3 None
Description
Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the `mxsldr` package.
Overview
- CVE ID
- CVE-2023-45842
- Assigner
- talos
- Vulnerability Status
- PUBLISHED
- Published Version
- 2023-12-05T11:30:11.082Z
- Last Modified Date
- 2023-12-05T18:00:07.833Z
Weakness Enumerations
References
Sources
Source Name | Source URL |
---|---|
NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-45842 |
MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45842 |
History
Created | Old Value | New Value | Data Type | Notes |
---|---|---|---|---|
2024-06-25 09:59:48 | Added to TrackCVE |