Buffer overflow vulnerability in the signelf library used by Zscaler Client Connector on Linux allows Code Injection. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6.
References
Configurations
History
17 Oct 2024, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Buffer overflow vulnerability in the signelf library used by Zscaler Client Connector on Linux allows Code Injection. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6. |
27 Oct 2023, 00:41
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| First Time |
Zscaler
Zscaler client Connector |
|
| CWE | CWE-787 | |
| CPE | cpe:2.3:a:zscaler:client_connector:*:*:*:*:*:linux:*:* | |
| References | (MISC) https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=Linux&applicable_version=1.3.1&deployment_date=2022-09-19 - Release Notes |
23 Oct 2023, 14:27
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-23 14:15
Updated : 2024-10-17 15:15
NVD link : CVE-2023-28793
Mitre link : CVE-2023-28793
JSON object : View
Products Affected
zscaler
- client_connector
CWE
CWE-787
Out-of-bounds Write