QID 379193

QID 379193: Perforce Helix Core Server Multiple Vulnerabilities

Perforce Helix Core is the leading version control system for teams who need to accelerate innovation at scale. Store and track changes to all your digital assets, from source code to binary to IPs.

CVE-2023-5759: An unauthenticated remote Denial of Service (DoS) via the buffer was identified in Helix Core.
CVE-2023-45849: An arbitrary code execution which results in privilege escalation was discovered in Helix Core.
CVE-2023-35767: An unauthenticated remote Denial of Service (DoS) via the shutdown function was identified in Helix Core.
CVE-2023-45319: An unauthenticated remote Denial of Service (DoS) via the commit function was identified in Helix Core.

Affected Versions:
Helix Core Server before version 2023.2

QID Detection Logic (Authenticated):
This QID checks vulnerable versions of Helix Core Server

Successful exploitation of this vulnerability allows Denial of Service (DoS).

CVSS V3 rated as Critical - 9.8 severity.

CVSS V2 rated as Low - 0 severity.

Solution

Vendor has released updated versions to fix these vulnerabilities. Please refer Helix Core Server for more details.

Vendor References

Helix Core Server - www.perforce.com/perforce/doc.current/user/relnotes.txt

CVEs related to QID 379193

CVE-2023-5759 | CVE-2023-45849 | CVE-2023-35767 | CVE-2023-45319 |

Software Advisories

Advisory ID	Software	Component	Link
Helix Core Server			www.perforce.com/support/software-release-index#tab-panel-6208

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].