CoreCVE
Back

HIGH

A stack-based buffer overflow vulnerability in gross 0.9.3 through 1.x before 1.0.4 allows remote attackers to trigger a denial of service (grossd daemon crash) or potentially execute arbitrary code in grossd via crafted SMTP transaction parameters that cause an incorrect strncat for a log entry

Published Mar 18, 2024

Description

A stack-based buffer overflow vulnerability in gross 0.9.3 through 1.x before 1.0.4 allows remote attackers to trigger a denial of service (grossd daemon crash) or potentially execute arbitrary code in grossd via crafted SMTP transaction parameters that cause an incorrect strncat for a log entry.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (3)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner mitre
Published Mar 18, 2024
Updated Mar 20, 2025
Reserved Dec 29, 2023
Link CVE-2023-52159

CISA Vulnrichment

Updated Mar 20, 2024

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2023-52159

Red Hat

No data

ENISA EUVD

Assigner mitre
Published Mar 18, 2024
Updated Mar 20, 2025
Link EUVD-2023-56832

GitHub

No data