Skip to content
OpenAdvisories
High · 7.5 CVE-2019-5038 EUVD-2019-14645GHSA-wwxc-5h4g-q9j8

An exploitable command execution vulnerability exists in the print-tlv command of Weave tool. A specially crafted weave TLV can trigger a s…

Published Aug 20, 2019 · Updated Aug 4, 2024 · Assigned by talos

Description

An exploitable command execution vulnerability exists in the print-tlv command of Weave tool. A specially crafted weave TLV can trigger a stack-based buffer overflow, resulting in code execution. An attacker can trigger this vulnerability by convincing the user to open a specially crafted Weave command.

Affected products

VendorProductAffectedFixed
— Nest Labs Nest Labs Openweave-core 4.0.2 —

References