Description
A security flaw has been discovered in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. The impacted element is the function CipAttribute::GetAttrData/CipAttribute::SetAttrData of the file ciptypes.h of the component Generic Attribute Logic. Performing a manipulation results in memory corruption. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The patch is named e745d9d4a8ca3a13689066983a1269fe1e567674. It is suggested to install a patch to address this issue.
Published: 2026-08-20
Score: 6.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability arises from buffer overflow in CipAttribute::SetAttrData and GetAttrData functions within ciptypes.h. The overflow can corrupt memory, allowing an attacker to manipulate program state. If executed, this flaw could enable arbitrary code execution or system compromise. The flaw is an instance of CWE‑119, which describes buffer over-read and write risks.

Affected Systems

The affected product is liftoff‑sr CIPster, specifically the release identified by commit 1802525be27d33e19a9a83c163e331a1d13b1892. No other version range is disclosed; the patch commit e745d9d4a8ca3a13689066983a1269fe1e567674 is to be applied to this codebase to fix the issue.

Risk and Exploitability

The CVSS score of 6.9 indicates a moderate severity. The EPSS score is not available, so the statistical likelihood of exploitation cannot be quantified, but the vulnerability is listed as publicly available and exploitable. It is not yet in KEV. A remote attacker can exploit the flaw over the network, so the risk is significant for exposed services.

Generated by OpenCVE AI on August 20, 2026 at 20:58 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the official patch identified by commit e745d9d4a8ca3a13689066983a1269fe1e567674 or upgrade to a newer CIPster release that includes the fix.
  • Restrict network exposure of components that invoke CipAttribute::SetAttrData by limiting inbound traffic to known trusted hosts or placing the service behind a firewall or reverse proxy.
  • Enable detailed logging for host and application events, and monitor for anomalous memory corruption or unauthorized write attempts that might indicate exploitation attempts.

Generated by OpenCVE AI on August 20, 2026 at 20:58 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 20 Aug 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 20 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
Description A security flaw has been discovered in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. The impacted element is the function CipAttribute::GetAttrData/CipAttribute::SetAttrData of the file ciptypes.h of the component Generic Attribute Logic. Performing a manipulation results in memory corruption. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The patch is named e745d9d4a8ca3a13689066983a1269fe1e567674. It is suggested to install a patch to address this issue.
Title liftoff-sr CIPster Generic Attribute Logic ciptypes.h SetAttrData memory corruption
First Time appeared Liftoff-sr
Liftoff-sr cipster
Weaknesses CWE-119
CPEs cpe:2.3:a:liftoff-sr:cipster:*:*:*:*:*:*:*:*
Vendors & Products Liftoff-sr
Liftoff-sr cipster
References
Metrics cvssV2_0

{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C'}

cvssV3_0

{'score': 7.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'}

cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Liftoff-sr Cipster
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-08-20T18:02:25.388Z

Reserved: 2026-08-20T06:51:55.087Z

Link: CVE-2026-76987

cve-icon Vulnrichment

Updated: 2026-08-20T18:02:21.653Z

cve-icon NVD

Status : Deferred

Published: 2026-08-20T13:19:06.450

Modified: 2026-08-24T16:40:53.647

Link: CVE-2026-76987

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-20T21:00:05Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer