TI-2023-13041 Aliases CVE-2023-28501 GHSA-jhq5-5c6h-9xj2

Heap buffer overflow in unirpcd

HIGH 82CWE-190Published 2023-03-29 · Updated 2025-02-18

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-190 and the CVSS impact.

Summary

Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a heap-based buffer overflow in the unirpcd daemon that, if successfully exploited, can lead to remote code execution as the root user.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.01418 72nd percentileScored 2026-11-07

Fix Fixed UniData (Rocket Software): 8.2.4.3003UniVerse (Rocket Software): 11.3.5.1001, 12.2.1.2002

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: Yes
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Rocket Software	UniData	before 8.2.4.3003	8.2.4.3003	Patch available	CNA
Rocket Software	UniVerse	before 11.3.5.1001; before 12.2.1.2002	11.3.5.1001, 12.2.1.2002	Patch available	CNA

UniData VendorRocket Software Affected before 8.2.4.3003 Fixed in 8.2.4.3003 Patch available CNA
UniVerse VendorRocket Software Affected before 11.3.5.1001; before 12.2.1.2002 Fixed in 11.3.5.1001, 12.2.1.2002 Patch available CNA

CPE configurations NVD · 3

CPE	Versions	Role	Vendor
cpe:2.3:a:rocketsoftware:unidata::::::::	up to 8.2.4	Vulnerable	Rocket Software
cpe:2.3:a:rocketsoftware:universe::::::::	up to 11.3.5; 12.0.0 – 12.2.1	Vulnerable	Rocket Software
cpe:2.3:o:linux:linux_kernel:-:::::::*	not specified by NVD	Running on	Linux

cpe:2.3:a:rocketsoftware:unidata:*:*:*:*:*:*:*:* Versions up to 8.2.4 Vulnerable ·Rocket Software
cpe:2.3:a:rocketsoftware:universe:*:*:*:*:*:*:*:* Versions up to 11.3.5; 12.0.0 – 12.2.1 Vulnerable ·Rocket Software
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Linux

Remediation

Fix · CNA UniData (Rocket Software) Fixed in 8.2.4.3003
Fix · CNA UniVerse (Rocket Software) Fixed in 11.3.5.1001, 12.2.1.2002

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Release · 2023-03-29
Rocket Software UniVerse 11.3.5.1001, 12.2.1.2002
9 records Highest priority Priority HIGH 5 HIGH, 3 MEDIUM, 1 LOW
Other records, highest priority first
- TI-2023-13042 Stack buffer overflow in UniRPC's udadmin_server servicePriority HIGH 84
- TI-2023-13043 Authentication bypass in UniRPC's udadmin servicePriority HIGH 78
- TI-2023-13048 Heap corruption in UniRPC servicePriority HIGH 73
Show all 9 records →

Timeline

2026-10-02 Threatist record created from CVE-2023-28501
2026-10-03 Alias added: GHSA-jhq5-5c6h-9xj2

References

Advisory 1

https://www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/

TI-2023-13042 Stack buffer overflow in UniRPC's udadmin_server service CVSS 3.1CRITICAL 9.8
TI-2023-13043 Authentication bypass in UniRPC's udadmin service CVSS 3.1CRITICAL 9.8
TI-2023-13048 Heap corruption in UniRPC service CVSS 3.1HIGH 8.8
TI-2023-13046 Stack buffer overflow in UniRPC service CVSS 3.1HIGH 8.8
TI-2023-13044 Stack buffer overflow in UniRPC library function CVSS 3.1CRITICAL 9.8
TI-2023-13047 Memory exhaustion in LZ4 decompression in UniRPC daemon CVSS 3.1CRITICAL 9.8

See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences