CVE-2023-31102

Katalog CVE

CVSS 7.8 · High EPSS 57,1%

Kerentanan Integer Underflow (Wrap or Wraparound) pada 7-zip, netapp active iq unified manager +1 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive.

Rincian

Terbit di NVD

3 November 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-191: Integer Underflow (Wrap or Wraparound)

EPSS (30 hari)

57,1% peluang dieksploitasi; lebih tinggi dari 99,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://security.netapp.com/advisory/ntap-20231110-0007/ advisory pihak ketiga
• https://www.zerodayinitiative.com/advisories/ZDI-23-1165/ advisory pihak ketiga · vdb entry
• https://ds-security.com/post/integer-overflow-in-7-zip-cve-2023-31102/
• https://sourceforge.net/p/sevenzip/discussion/45797/thread/713c8a8269/ issue tracking · release notes
• https://www.7-zip.org/download.html product