CVE-2023-28793: Heap Based Buffer Overflow in Library

Heap Based Buffer Overflow in Library

Status

Published

2023-10-23

Updated

2025-02-27

Assigning organization

Zscaler

Description

Buffer overflow vulnerability in the signelf library used by Zscaler Client Connector on Linux allows Code Injection. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zscaler Client Connector

Default version status: unaffected

0 to < 1.3.1.6affected

References

https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=Linux&applicable_version=1.3.1&deployment_date=2022-09-19 ↗