Security Advisory

CVE-2019-5038

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-08-20 20:39:27

Last updated 2024-08-04 19:40:49

Assigner talos

CVSS score 7.5

State PUBLISHED

Description

An exploitable command execution vulnerability exists in the print-tlv command of Weave tool. A specially crafted weave TLV can trigger a stack-based buffer overflow, resulting in code execution. An attacker can trigger this vulnerability by convincing the user to open a specially crafted Weave command.

← Browse all CVEs View on cve.org ↗