CVE-2023-26257

ALTO 7.5CVE-2023-26257 · Published 27/02/2023 · updated 17/06/2026

En resumen

CVE-2023-26257 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a dlt-daemon (covesa).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.2%, mayor que el 68.6% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
dlt-daemon covesa	`≤ 2.18.8`	No fix yet

Description

An issue was discovered in the Connected Vehicle Systems Alliance (COVESA; formerly GENIVI) dlt-daemon through 2.18.8. Dynamic memory is not released after it is allocated in dlt-control-common.c.

References

COVESA/dlt-daemon · Exploit
COVESA/dlt-daemon#441 · Patch
lists.debian.org/debian-lts-announce/2024/06/msg00021.html

Más vulnerabilidades de dlt-daemon

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free