CVE-2023-45842

8.1HIGH

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can l

发布于: 12/5/2023更新于: 11/4/2025
在NVD查看在MITRE查看

描述

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the `mxsldr` package.

AI分析AI驱动

受影响产品

buildrootbuildroot
2023.08.1

参考资料