CVE-2023-4156

CVE Details

CVE-2023-4156

Last Update

11/7/2024

NIST CVE Summary

A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information.

Our Official Summary

This vulnerability is reported on several 3rd party images used by the product. We are waiting on an upstream fix from the vendor. If the vulnerability is exploited, impact is low for the products using these images.

CVE Severity

7.1

Status

Ongoing

Affected Products & Versions

• Palette VerteX airgap 4.4.14
• Palette VerteX 4.5.3, 4.5.8
• Palette Enterprise 4.5.3, 4.5.8

Revision History

• 1.0 08/16/2024 Initial Publication
• 2.0 08/17/2024 Added Palette VerteX airgap 4.4.14 to Affected Products
• 3.0 10/14/2024 Added Palette VerteX and Palette Enterprise 4.5.3 to Affected Products
• 4.0 10/14/2024 Added Palette VerteX and Palette Enterprise 4.5.8 to Affected Products