CVE-2023-45897

    Dashboard / Vulnerabilities / CVE-2023-45897

    CVE-2023-45897

    Published: 28 Oct 2023Last Modified: 28 Oct 2026

    Summary:

    Details: exfatprogs before 1.2.2 allows out-of-bounds memory access, such as in read_file_dentry_set.

    References: https://dfir.ru/2023/11/01/cve-2023-45897-a-vulnerability-in-the-linux-exfat-userspace-tools/, https://github.com/exfatprogs/exfatprogs/releases/tag/1.2.2, https://lists.debian.org/debian-lts-announce/2024/09/msg00003.html, https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/45xxx/CVE-2023-45897.json, https://nvd.nist.gov/vuln/detail/CVE-2023-45897, https://github.com/exfatprogs/exfatprogs/commit/22d0e43e8d24119cbfc6efafabb0dec6517a86c4, https://github.com/exfatprogs/exfatprogs/commit/4abc55e976573991e6a1117bb2b3711e59da07ae, https://github.com/exfatprogs/exfatprogs/commit/ec78688e5fb5a70e13df82b4c0da1e6228d3ccdf

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -8fe26c50703fba6eb3046e42b674eb0a41da2119

    Affected versions

    1.2.1
    1.2.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-45897 | CVE-DB