CVE-2023-23580

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Stack-based buffer overflow for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121 CWE-787

Affected software

No affected versions have been published.

Timeline

Published: May 10, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-235817.5A denial-of-service vulnerability exists in the vpnserver EnSafeHttpHeaderValueStr functionality of SoftEther VPN 5.01.9674 and 5.02. A spec CVE-2023-235829.8Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer overflow, which could allow an attacker to e CVE-2023-235837.8Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may allow an authenticated user to potentially CVE-2023-235844.3An observable response discrepancy in the Gallagher Command Centre RESTAPI allows an insufficiently-privileged user to infer the presence of CVE-2023-235857.5Experion server DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation CVE-2023-235865.5Due to a vulnerability in the io_uring subsystem, it is possible to leak kernel memory information to the user process. timens_install calls CVE-2023-235886.3A vulnerability has been identified in SIMATIC IPC1047 (All versions), SIMATIC IPC1047E (All versions with maxView Storage Manager < 4.09.00 CVE-2023-235896.5The SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4 protocol can be used but not the safe SOCKS4a proto CVE-2023-23598.8The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload CVE-2023-235907.5Mercedes-Benz XENTRY Retail Data Storage 7.8.1 allows remote attackers to cause a denial of service (device restart) via an unauthenticated CVE-2023-235914.9The Logback component in Terminalfour before 8.3.14.1 allows OS administrators to obtain sensitive information from application server logs CVE-2023-235927.5WALLIX Access Manager 3.x through 4.0.x allows a remote attacker to access sensitive information.