CVE-2026-73583
MediumCVSS 6.6Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
An unsafe deserialization vulnerability was found in sblim-sfcb's provider-manager IPC message parsing. A local attacker can send a crafted message causing out-of-bounds memory access, leading to termination of the provider-manager process and denial of service. This could also potentially result in limited unintended information disclosure.
Risk Assessment
The risk includes service disruptions and potential leakage of sensitive data, impacting operational continuity and confidentiality.
Recommendation
Apply vendor patches for sblim-sfcb and monitor system logs for unusual IPC-related activity.
Original NVD description (English source)
A flaw was found in sblim-sfcb. A local attacker with access to the system can exploit an unsafe deserialization vulnerability in the provider-manager's inter-process communication (IPC) message parsing. By sending a specially crafted message, the attacker can cause out-of-bounds memory access, leading to the termination of the provider-manager process and a denial of service. This could also potentially result in limited unintended information disclosure.