← voltar
CVE-2023-3433

Local Denial of Service in Jami

CVSS 5.5 MEDIUMEPSS 0.2%CWE-20
Vexday Risk Score
13Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 5.5EPSS 0.2%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
14 jul 2023Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
The "nickname" field within Savoir-faire Linux's Jami application is susceptible to a failed state when a user inserts special characters into the field. When present, these special characters, make it so the application cannot create the signature for the user and results in a local denial of service to the application. 
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H