CVE-2023-38856

MediumCVSS 6.5

Published: 15/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.77%

51th percentile - higher than 51% of all known CVEs

Summary

CVE-2023-38856 is a buffer overflow vulnerability in libxls version 1.6.2 that allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the get_string function in xlstool.c:411.

Risk Assessment

An attacker can exploit this vulnerability to execute code remotely, posing a serious threat to the integrity and availability of the system.

Recommendation

It is recommended to update libxls to the latest version to mitigate this vulnerability and to monitor systems for suspicious activity.

Original NVD description (English source)

Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the get_string function in xlstool.c:411.