bettercap zerogod IPP Service zerogod_ipp_primitives.go ippReadChunkedBody integer coercion
33Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendcvss 6.3epss 0.5%
probabilidade de exploração
0.5%top 59% das CVEs
exploração observada
nãonenhuma fonte reporta
1 exploit(s) público(s)
A vulnerability was detected in bettercap up to 2.41.5. Affected by this vulnerability is the function ippReadChunkedBody of the file modules/zerogod/zerogod_ipp_primitives.go of the component zerogod IPP Service. Performing a manipulation results in integer coercion error. The attack can be initiated remotely. The attack is considered to have high complexity. The exploitation appears to be difficult. The exploit is now public and may be used. The patch is named 3731d5576cffae9eefe3721cd46a40933304129f. To fix this issue, it is recommended to deploy a patch.
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
n/a · bettercapPoCs públicas encontradas — 1
cve_referencegithub.com/user-attachments/files/26852847/poc.pynão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
https://github.com/bettercap/bettercap/https://github.com/bettercap/bettercap/commit/3731d5576cffae9eefe3721cd46a40933304129fhttps://github.com/bettercap/bettercap/issues/1263https://github.com/bettercap/bettercap/pull/1264https://github.com/user-attachments/files/26852847/poc.pyhttps://vuldb.com/submit/811145https://vuldb.com/vuln/362572https://vuldb.com/vuln/362572/cti