Lucene search

MitreCVE-2023-30362

HistoryJun 23, 2023 - 12:15 p.m.

CVE-2023-30362

2023-06-2312:15:09

CWE-125

mitre

web.nvd.nist.gov

cve-2023-30362

buffer overflow

vulnerability

coap

libcoap

information security

nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

47.6%

JSON

Buffer Overflow vulnerability in coap_send function in libcoap library 4.3.1-103-g52cfd56 fixed in 4.3.1-120-ge242200 allows attackers to obtain sensitive information via malformed pdu.

Affected configurations

Nvd

Node

libcoaplibcoapRange<4.3.1-120-ge242200

VendorProductVersionCPE
libcoaplibcoap*cpe:2.3:a:libcoap:libcoap:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
libcoap	libcoap	*	cpe:2.3:a:libcoap:libcoap::::::::

References

github.com/obgm/libcoap/issues/1063

github.com/obgm/libcoap/pull/1065

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

47.6%

JSON

Related for CVE-2023-30362