Lucene search

K
nvd[email protected]NVD:CVE-2023-40296
HistoryAug 14, 2023 - 4:15 a.m.

CVE-2023-40296

2023-08-1404:15:11
CWE-787
web.nvd.nist.gov
3
cve-2023-40296
stack-based
receivefrom
receive
udpsocket.hpp
udp packets

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

27.8%

async-sockets-cpp through 0.3.1 has a stack-based buffer overflow in ReceiveFrom and Receive in udpsocket.hpp when processing malformed UDP packets.

Affected configurations

Nvd
Node
eminfedarasync-sockets-cppRange0.3.1
VendorProductVersionCPE
eminfedarasync-sockets-cpp*cpe:2.3:a:eminfedar:async-sockets-cpp:*:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

27.8%

Related for NVD:CVE-2023-40296