CVE-2023-28501

Deeper analysis

Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 contain a heap-based buffer overflow vulnerability in the unirpcd daemon, tracked as CVE-2023-28501 with a CVSS score of 9.8 and associated with CWE-190. The flaw resides in the RPC server component used by these multi-value database products and permits memory corruption when specially crafted network input is processed.

An unauthenticated remote attacker can send crafted packets directly to the unirpcd service over the network to trigger the overflow, resulting in arbitrary code execution with root privileges on the affected host. No user interaction or prior authentication is required, and the attack surface is exposed whenever the daemon listens on its default network port.

Public advisories from Rapid7 detail that the issues were addressed by the vendor through the release of the specific patched builds listed above, and they recommend immediate upgrade of both UniData and UniVerse installations. The associated EPSS score rose from a low baseline to a peak of 0.0514 before receding to its current value of 0.0196, indicating a period of increased exploitation interest after disclosure.