Global Buffer Overflow Vulnerability in N-Prolog from N-Prolog Vendor
CVE-2022-43343
7.5HIGH
Key Information:
- Vendor
N-prolog Project
- Status
- Vendor
- CVE Published:
- 8 November 2022
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2022-43343?
A global buffer overflow vulnerability has been identified in N-Prolog version 1.91, specifically in the gettoken() function located in Main.c. This flaw allows an attacker to potentially exploit the overflow, leading to unpredictable behavior or denial of service. Proper validation and management of input data are essential to mitigate risks associated with this vulnerability.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.