© 2026 vulntracker.io

CVE-2023-45838

HIGH

8.1

CVSS Score

Published: December 5, 2023 at 11:30 AM UTC

Updated: June 17, 2026 at 06:29 AM UTC

1 product affected across 1 vendorBuildroot

Using Buildroot by Buildroot?

Get instant alerts when new vulnerabilities affect Buildroot - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.1

Exploit prediction

EPSS 0.8%

Description

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the `aufs` package.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Buildroot · Buildroot

95%

2023.08.1dev commit 622698d7847

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

http://www.openwall.com/lists/oss-security/2023/12/11/1

References (3)

PatchThird Party Advisory

Source: [email protected]

http://www.openwall.com/lists/oss-security/2023/12/11/1

ExploitThird Party Advisory

Source: [email protected]

https://talosintelligence.com/vulnerability_reports/TALOS-2023-1844

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1844

CVSS

8.1HIGHtalos

Attack Vector: NETWORK
Complexity: HIGH
Privileges: NONE
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: HIGH
Integrity: HIGH
Availability: HIGH

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-494

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card