CVE Catalog

CVE-2023-3433

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.20%

10th percentile - higher than 10% of all known CVEs

Summary

The 'nickname' field within Savoir-faire Linux's Jami application is susceptible to a failed state when a user inserts special characters into the field. When present, these special characters prevent the application from creating the user's signature, resulting in a local denial of service.

Risk Assessment

The organization may experience downtime in the Jami application, affecting service availability for users.

Recommendation

It is recommended to validate input in the 'nickname' field to block the entry of special characters.

Original NVD description (English source)

The "nickname" field within Savoir-faire Linux's Jami application is susceptible to a failed state when a user inserts special characters into the field. When present, these special characters, make it so the application cannot create the signature for the user and results in a local denial of service to the application. 

Vulnerability data from NVD (NIST) · CISA KEV · EPSS