CVE-2023-28501

CRITICAL

Rocket Software UniData <8.2.4-11.3.5-12.2.1 - Buffer Overflow

Title source: llm
STIX 2.1

Description

Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a heap-based buffer overflow in the unirpcd daemon that, if successfully exploited, can lead to remote code execution as the root user.

References (1)

Core 1

Scores

CVSS v3 9.8
EPSS 0.0142
EPSS Percentile 69.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

CWE
CWE-190
Status published
Products (2)
rocketsoftware/unidata < 8.2.4
rocketsoftware/universe < 11.3.5
Published Mar 29, 2023
Tracked Since Feb 18, 2026