Skip to content
OpenAdvisories

Vendor

Rocket Software

10 known vulnerabilities.

5 results · Clear filters · Feed

  • Critical 9.8

    Memory exhaustion in LZ4 decompression in UniRPC daemon

    Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a memory-exhaustion issue, where a decompression routine will allocate increasing amounts of memory until all system m…

  • Critical 9.8

    Stack buffer overflow in UniRPC library function

    Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buffer overflow that can lead to remote code execution as the root user.

  • Critical 9.8
    CVE-2023-28503 Public exploit EPSS 61%

    Authentication bypass in UniRPC's udadmin service

    Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from an authentication bypass vulnerability, where a special username with a deterministic password can be leveraged to byp…

  • Critical 9.8
    CVE-2023-28502 Public exploit EPSS 60%

    Stack buffer overflow in UniRPC's udadmin_server service

    Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buffer overflow in the "udadmin" service that can lead to remote code execution as the root user.

  • Critical 9.8

    Heap buffer overflow in unirpcd

    Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a heap-based buffer overflow in the unirpcd daemon that, if successfully exploited, can lead to remote code execution …