CVE-2023-3171

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A flaw was found in EAP-7 during deserialization of certain classes, which permits instantiation of HashMap and HashTable with no checks on resources consumed. This issue could allow an attacker to submit malicious requests using these classes, which could eventually exhaust the heap and result in a Denial of Service.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-789CWE-770

Affected software

No affected versions have been published.

Timeline

Published
Dec 27, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-317109.8TP-Link Archer AX21(US)_V3_1.1.4 Build 20230219 and AX21(US)_V3.6_1.1.4 Build 20230219 are vulnerable to Buffer Overflow.CVE-2023-317149.8Chitor-CMS before v1.1.2 was discovered to contain multiple SQL injection vulnerabilities.CVE-2023-317167.5FUXA <= 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.logCVE-2023-317177.5A SQL Injection attack in FUXA <= 1.1.12 allows exfiltration of confidential information from the database.CVE-2023-317187.5FUXA <= 1.1.12 is vulnerable to Local via Inclusion via /api/download.CVE-2023-317199.8FUXA <= 1.1.12 is vulnerable to SQL Injection via /api/signin.CVE-2023-31727.2Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20.CVE-2023-317227.8There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891).CVE-2023-317235.5yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expand_mmac_params at /nasm/nasm-pp.c.CVE-2023-317247.8yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function do_directive at /nasm/nasm-pp.c.CVE-2023-317255.5yasm 1.3.0.55.g101bc was discovered to contain a heap-use-after-free via the function expand_mmac_params at yasm/modules/preprocs/nasm/nasm-CVE-2023-317267.5AList 3.15.1 is vulnerable to Incorrect Access Control, which can be exploited by attackers to obtain sensitive information.
CVE-2023-3171: High severity, CVSS 7.5 | Vulnix