CVE-2023-37239

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Format string vulnerability in the distributed file system. Attackers who bypass the selinux permission can exploit this vulnerability to crash the program.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published: Jul 6, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-37248.8If a TLS 1.3 client gets neither a PSK (pre shared key) extension nor a KSE (key share extension) when connecting to a malicious server, a d CVE-2023-372409.1Vulnerability of missing input length verification in the distributed file system. Successful exploitation of this vulnerability may cause CVE-2023-372417.5Input verification vulnerability in the WMS API. Successful exploitation of this vulnerability may cause the device to restart.CVE-2023-372429.8Vulnerability of commands from the modem being intercepted in the atcmdserver module. Attackers may exploit this vulnerability to rewrite th CVE-2023-372437.8The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboo CVE-2023-372447.0The affected AutomationManager.AgentService.exe application contains a TOCTOU race condition vulnerability that allows standard users to cre CVE-2023-372459.1Buffer overflow vulnerability in the modem pinctrl module. Successful exploitation of this vulnerability may affect the integrity and availa CVE-2023-372467.8A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All CVE-2023-372477.8A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All CVE-2023-372487.8A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All CVE-2023-372498.8Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell access.CVE-2023-37259.8Potential buffer overflow vulnerability in the Zephyr CAN bus subsystem