Log in Start free

Vulnerability · Published Aug 15, 2023 · Assigned by mitre

CVE-2023-38852

Medium 6.5

In plain English

A medium-severity security flaw in the r-cran-readxl package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 71% of all known vulnerabilities).

Severity (CVSS NVD)6.5Medium
Exploit odds (30 days)1.3%top 28.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the unicode_decode_wcstombs function in xlstool.c:266.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12r-cran-readxlno fix listedDEBIAN-CVE-2023-38852
Debian:13r-cran-readxlno fix listedDEBIAN-CVE-2023-38852
Debian:14r-cran-readxlno fix listedDEBIAN-CVE-2023-38852
Ubuntu:22.04:LTSr-cran-readxlno fix listedUBUNTU-CVE-2023-38852
Ubuntu:24.04:LTSr-cran-readxlno fix listedUBUNTU-CVE-2023-38852
Ubuntu:25.10r-cran-readxlno fix listedUBUNTU-CVE-2023-38852
Ubuntu:26.04:LTSr-cran-readxlno fix listedUBUNTU-CVE-2023-38852
Ubuntu:26.10r-cran-readxlno fix listedUBUNTU-CVE-2023-38852

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References