CVE-2023-35767 - OpenCVE

In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the shutdown function was identified. Reported by Jason Geffner.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Perforce	Helix Core

Configuration 1 [-]

cpe:2.3:a:perforce:helix_core:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://perforce.com

History

No history.

MITRE

Status: PUBLISHED

Assigner: Perforce

Published: 2023-11-08T15:31:29.693Z

Updated: 2024-09-04T14:20:03.137Z

Reserved: 2023-10-24T21:47:07.842Z

Link: CVE-2023-35767

Vulnrichment

Updated: 2024-08-02T16:30:44.655Z

NVD

Status : Analyzed

Published: 2023-11-08T16:15:08.813

Modified: 2023-11-15T16:17:04.597

Link: CVE-2023-35767

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-35767", "assignerOrgId": "ca2a266c-be2f-4d4b-92d0-47b76b1a9c4e", "state": "PUBLISHED", "assignerShortName": "Perforce", "dateReserved": "2023-10-24T21:47:07.842Z", "datePublished": "2023-11-08T15:31:29.693Z", "dateUpdated": "2024-09-04T14:20:03.137Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Helix Core", "vendor": "Helix", "versions": [{"lessThan": "2023.2", "status": "affected", "version": "0.0.0", "versionType": "semver"}, {"lessThan": "2023.1 Patch 2", "status": "affected", "version": "0.0.0", "versionType": "semver"}, {"lessThan": "2022.2 Patch 3", "status": "affected", "version": "0.0.0", "versionType": "semver"}, {"lessThan": "2022.1 Patch 6", "status": "affected", "version": "0.0.0", "versionType": "semver"}, {"lessThan": "2021.2 Patch 10", "status": "affected", "version": "0.0.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "Helix Swarm", "vendor": "Helix ", "versions": [{"lessThan": "2024.1 ", "status": "affected", "version": "0.0.0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the shutdown function was identified. Reported by </span><span style=\"background-color: rgb(255, 255, 255);\">Jason Geffner</span><span style=\"background-color: rgb(255, 255, 255);\">. </span><span style=\"background-color: rgb(255, 255, 255);\"> </span><br>"}], "value": "In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the shutdown function was identified. Reported by Jason Geffner. \u00a0\n"}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-400", "description": "CWE-400 Uncontrolled Resource Consumption", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "ca2a266c-be2f-4d4b-92d0-47b76b1a9c4e", "shortName": "Perforce", "dateUpdated": "2024-02-01T22:39:39.464Z"}, "references": [{"url": "https://perforce.com"}], "source": {"discovery": "UNKNOWN"}, "title": "Unauthenticated Remote Denial-of-Service via Shutdown Function in Helix Core", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T16:30:44.655Z"}, "title": "CVE Program Container", "references": [{"url": "https://perforce.com", "tags": ["x_transferred"]}]}, {"affected": [{"vendor": "helix", "product": "helix_core", "cpes": ["cpe:2.3:a:helix:helix_core:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0.0.0", "status": "affected", "lessThan": "2023.1\\/patch_2\\/", "versionType": "semver"}, {"version": "0.0.0", "status": "affected", "lessThan": "2022.2\\/patch_3\\/", "versionType": "semver"}, {"version": "0.0.0", "status": "affected", "lessThan": "2022.1\\/patch_6\\/", "versionType": "semver"}, {"version": "0.0.0", "status": "affected", "lessThan": "2021.2\\/patch_10\\/", "versionType": "semver"}]}, {"vendor": "helix", "product": "helix_swarm", "cpes": ["cpe:2.3:a:helix:helix_swarm:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0.0.0", "status": "affected", "lessThan": "2024.1", "versionType": "semver"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-09-04T14:13:58.221210Z", "id": "CVE-2023-35767", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-04T14:20:03.137Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://perforce.com", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T16:30:44.655Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-35767", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-04T14:13:58.221210Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:helix:helix_core:*:*:*:*:*:*:*:*"], "vendor": "helix", "product": "helix_core", "versions": [{"status": "affected", "version": "0.0.0", "lessThan": "2023.1\\/patch_2\\/", "versionType": "semver"}, {"status": "affected", "version": "0.0.0", "lessThan": "2022.2\\/patch_3\\/", "versionType": "semver"}, {"status": "affected", "version": "0.0.0", "lessThan": "2022.1\\/patch_6\\/", "versionType": "semver"}, {"status": "affected", "version": "0.0.0", "lessThan": "2021.2\\/patch_10\\/", "versionType": "semver"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:helix:helix_swarm:*:*:*:*:*:*:*:*"], "vendor": "helix", "product": "helix_swarm", "versions": [{"status": "affected", "version": "0.0.0", "lessThan": "2024.1", "versionType": "semver"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-04T14:18:07.138Z"}}], "cna": {"title": "Unauthenticated Remote Denial-of-Service via Shutdown Function in Helix Core", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Helix", "product": "Helix Core", "versions": [{"status": "affected", "version": "0.0.0", "lessThan": "2023.2", "versionType": "semver"}, {"status": "affected", "version": "0.0.0", "lessThan": "2023.1 Patch 2", "versionType": "semver"}, {"status": "affected", "version": "0.0.0", "lessThan": "2022.2 Patch 3", "versionType": "semver"}, {"status": "affected", "version": "0.0.0", "lessThan": "2022.1 Patch 6", "versionType": "semver"}, {"status": "affected", "version": "0.0.0", "lessThan": "2021.2 Patch 10", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Helix ", "product": "Helix Swarm", "versions": [{"status": "affected", "version": "0.0.0", "lessThan": "2024.1 ", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://perforce.com"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the shutdown function was identified. Reported by Jason Geffner. \u00a0\n", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the shutdown function was identified. Reported by </span><span style=\"background-color: rgb(255, 255, 255);\">Jason Geffner</span><span style=\"background-color: rgb(255, 255, 255);\">. </span><span style=\"background-color: rgb(255, 255, 255);\"> </span><br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-400", "description": "CWE-400 Uncontrolled Resource Consumption"}]}], "providerMetadata": {"orgId": "ca2a266c-be2f-4d4b-92d0-47b76b1a9c4e", "shortName": "Perforce", "dateUpdated": "2024-02-01T22:39:39.464Z"}}}, "cveMetadata": {"cveId": "CVE-2023-35767", "state": "PUBLISHED", "dateUpdated": "2024-09-04T14:20:03.137Z", "dateReserved": "2023-10-24T21:47:07.842Z", "assignerOrgId": "ca2a266c-be2f-4d4b-92d0-47b76b1a9c4e", "datePublished": "2023-11-08T15:31:29.693Z", "assignerShortName": "Perforce"}, "dataVersion": "5.1"}