CVE-2023-28798

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-28798
An out-of-bounds write to heap in the pacparser library on Zscaler Client Connector on Mac may lead to arbitrary code execution.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 3.7

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope CHANGED

References
Link Resource
https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=macOS&applicable_version=3.7&deployment_date=2022-08-19&id=1414851
https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=macOS&applicable_version=3.7&deployment_date=2022-08-19&id=1414851
Configurations

No configuration.

History

21 Nov 2024, 07:56

Type Values Removed Values Added
Summary
  • (es) Una escritura fuera de los límites en el montón en la librería pacparser en Zscaler Client Connector en Mac puede provocar la ejecución de código arbitrario.
References () https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=macOS&applicable_version=3.7&deployment_date=2022-08-19&id=1414851 - () https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=macOS&applicable_version=3.7&deployment_date=2022-08-19&id=1414851 -

02 May 2024, 13:23

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-02 13:23

Updated : 2024-11-21 07:56

NVD link : CVE-2023-28798

Mitre link : CVE-2023-28798

CVE.ORG link : CVE-2023-28798

JSON object : View

Products Affected

No product.

CWE
CWE-122

Heap-based Buffer Overflow