CVE-2023-26266
In AFL++ 4.05c, the CmpLog component uses the current working directory to resolve and execute unprefixed fuzzing targets, allowing code execution.
Original description
The description as published by the source.
In AFL++ 4.05c, the CmpLog component uses the current working directory to resolve and execute unprefixed fuzzing targets, allowing code execution.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-26266 aflplusplus
- Ubuntu UBUNTU-CVE-2023-26266 aflplusplus
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com