File Sharing Vulnerability in Croc by Schollz
CVE-2023-43619

7.8HIGH

Key Information:

Vendor

Schollz

Status
Croc
Vendor
CVE Published:
20 September 2023

What is CVE-2023-43619?

A vulnerability exists in the Croc file sharing utility, allowing senders to transmit potentially harmful files, including executable content and sensitive SSH configuration files. This poses significant risks to receivers who may inadvertently accept malicious files, potentially leading to unauthorized access or data breaches. Users of Croc versions 9.6.5 and below should exercise caution and apply necessary security measures to mitigate potential threats.

References

https://www.openwall.com/lists/oss-security/2023/09/08/2
https://github.com/schollz/croc/issues/593
http://www.openwall.com/lists/oss-security/2023/09/21/5
mailing-list

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.