CVE-2023-49287

CRITIQUE 9.8CVE-2023-49287 · Published 04/12/2023 · updated 17/06/2026

En bref

CVE-2023-49287 est une vulnérabilité CRITIQUE (CVSS 9.8) touchant tinydir (cxong).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.9%, plus élevée que 79.5% des vulnérabilités.
Correctif : mettre à jour vers 1.2.6 ou plus récent.

Package	Affected versions	Patched versions
tinydir cxong	`< 1.2.6`	`1.2.6`

Description

TinyDir is a lightweight C directory and file reader. Buffer overflows in the `tinydir_file_open()` function. This vulnerability has been patched in version 1.2.6.

References

packetstormsecurity.com/files/176060/TinyDir-1.2.5-Buffer-Overflow.html · Exploit
seclists.org/fulldisclosure/2023/Dec/14
openwall.com/lists/oss-security/2023/12/04/1 · Mailing List
cxong/tinydir release 1.2.6 · Release Notes
cxong/tinydir security advisory · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free