CVE-2023-26257 An issue was discovered in the Connected Vehicle Systems Alliance (COVESA; formerly GENIVI) dlt-daemon through 2.18.8. Dynamic memory is not released after it is allocated in dlt-control-common.c.
HighCVSS 7.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in the Connected Vehicle Systems Alliance (COVESA; formerly GENIVI) dlt-daemon through 2.18.8. Dynamic memory is not released after it is allocated in dlt-control-common.c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/dlt-daemon(Debian:12) | All versions | No fix listed |
| debian/dlt-daemon(Debian:12) | = 2.18.10-1 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 2.18.10-10 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 2.18.10-11 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 2.18.10-12 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 2.18.10-12.1 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 2.18.10-13 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 2.18.10-2 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 2.18.10-3 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 2.18.10-4 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 2.18.10-5 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 2.18.10-6 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 2.18.10-7 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 2.18.10-8 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 2.18.10-9 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 2.18.11-1 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 2.18.11-2 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 2.18.11-3 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 2.18.11-4 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 2.18.11-5 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 2.18.8-6 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 2.18.9-1 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 2.18.9-2 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 3.0.0-1 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 3.0.0-10 | No fix listed |
Show 12 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/dlt-daemon(Debian:12) | = 3.0.0-2 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 3.0.0-3 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 3.0.0-4 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 3.0.0-5 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 3.0.0-6 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 3.0.0-7 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 3.0.0-8 | No fix listed |
| debian/dlt-daemon(Debian:12) | = 3.0.0-9 | No fix listed |
| debian/dlt-daemon(Debian:13) | < 2.18.9-1 | 2.18.9-1 |
| debian/dlt-daemon(Debian:14) | < 2.18.9-1 | 2.18.9-1 |
| covesa dlt-daemon | <= 2.18.8 | No fix listed |
| ubuntu/dlt-daemon(Ubuntu:22.04) | All versions | No fix listed |
References
- Debian Security Tracker CVE-2023-26257 vendor-advisory
- github.com exploit
- github.com patch
- [debian-lts-announce] 20240627 [SECURITY] [DLA 3845-1] dlt-daemon security update mailing-list
- Ubuntu CVE tracker vendor-advisory
- www.cve.org