CVE-2023-49287

KRITISCH 9.8CVE-2023-49287 · Published 04/12/2023 · updated 17/06/2026

Kurz gesagt

CVE-2023-49287 ist eine Schwachstelle (KRITISCH (CVSS 9.8)) in tinydir (cxong).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.9%, höher als bei 79.5% aller Schwachstellen.
Abhilfe: auf 1.2.6 oder neuer aktualisieren.

Package	Affected versions	Patched versions
tinydir cxong	`< 1.2.6`	`1.2.6`

Description

TinyDir is a lightweight C directory and file reader. Buffer overflows in the `tinydir_file_open()` function. This vulnerability has been patched in version 1.2.6.

References

packetstormsecurity.com/files/176060/TinyDir-1.2.5-Buffer-Overflow.html · Exploit
seclists.org/fulldisclosure/2023/Dec/14
openwall.com/lists/oss-security/2023/12/04/1 · Mailing List
cxong/tinydir release 1.2.6 · Release Notes
cxong/tinydir security advisory · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free