CVE-2023-47480 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	8.4 HIGH	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitre	CNA	---				---
CISA-ADP	ADP	8.4 HIGH	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 16%

Debian Releases

Debian Product

Codename

puredata

bullseye	vulnerable
bullseye (security)	0.51.4-1+deb11u1 fixed
bookworm	0.53.1+ds-2+deb12u1 fixed
sid	0.55.2+ds-1 fixed
trixie	0.55.2+ds-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

puredata

oracular	not-affected
noble	not-affected
jammy	needs-triage
focal	needs-triage
bionic	needs-triage
xenial	needs-triage

Common Weakness Enumeration

CWE-252 - Unchecked Return Value
The software does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.

References

https://github.com/pure-data/pure-data/commit/0b5e467b8728b3ed56e1a8ee5b367ce78e7e6e5d

https://github.com/pure-data/pure-data/issues/2063

https://puredata.info/

https://lists.debian.org/debian-lts-announce/2024/09/msg00038.html