CVE-2023-4156 MEDIUM

CVE-2023-4156: Heap out of bound read in builtin.c

Vendor Red Hat
Product Red Hat Enterprise Linux 6
Weakness CWE-125
Published September 25, 2023
Last update September 24, 2024
View on NVD All CVEs

CVSS base score

4.4/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

What the vulnerability does

01Description

A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information.

Key dates

02Disclosure timeline

September 25, 2023 CVE published
September 24, 2024 Record updated