CVE-2023-41102

An issue was discovered in the captive portal in OpenNDS before version 10.1.3. It has multiple memory leaks due to not freeing up allocated memory. This may lead to a Denial-of-Service condition due to the consumption of all available memory. Affected OpenNDS before version 10.1.3 fixed in OpenW...

CVE-2023-38324

An issue was discovered in OpenNDS before 10.1.2. It allows users to skip the splash page sequence and directly authenticate when it is using the default FAS key and OpenNDS is configured as FAS. Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt master, OpenWrt 23.05 and...

CVE-2023-38320

CVE-2023-38320 describes a NULL pointer dereference in OpenNDS Captive Portal before 10.1.2. A crafted GET request with a missing User-Agent header can trigger this, leading to a Denial-of-Service (OpenNDS crash). The issue has a concrete fix: OpenNDS was updated to version 10.1.3, and patches we...

CVE-2023-38320

An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a showpreauthpage NULL pointer dereference that can be triggered with a crafted GET HTTP with a missing User-Agent header. Triggering this issue results in crashing OpenNDS a Denial-of-Service condition. This problem...

CVE-2023-38316

An issue was discovered in OpenNDS Captive Portal before version 10.1.2. When the custom unescape callback is enabled, attackers can execute arbitrary OS commands by inserting them into the URL portion of HTTP GET requests. Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt...

CVE-2023-41102

The CVE-2023-41102 vulnerability affects OpenNDS before version 10.1.3, where the captive portal has multiple memory leaks due to not freeing allocated memory, potentially causing a Denial-of-Service by exhausting memory. The issue is mitigated by upgrading to OpenNDS version 10.2.0, which has be...

CVE-2023-41101

An issue was discovered in the captive portal in OpenNDS before version 10.1.3. getquery in httpmicrohttpd.c does not validate the length of the query string of GET requests. This leads to a stack-based buffer overflow in versions 9.x and earlier, and to a heap-based buffer overflow in versions...

OpenNDS Buffer Error Vulnerability

openNDS is openNDS open source a high-performance , small footprint portal system . A buffer error vulnerability exists in versions of OpenNDS prior to 10.1.3, which stems from not validating the length of a query string for a GET request, and can lead to a stack-based buffer overflow that can be...

CVE-2023-38315

OpenNDS Captive Portal (before 10.1.2) is affected by a NULL pointer dereference in try_to_authenticate triggered by a crafted GET with a missing client token parameter, leading to a Denial-of-Service (crash). A fix is available: update OpenNDS to 10.1.3, which was applied in OpenWrt master, Open...

openNDS Code Issues Vulnerabilities

openNDS is openNDS open source a high-performance, small footprint portal system. A code issue vulnerability exists in versions prior to openNDS 10.1.2 that stems from the presence of a NULL pointer dereference, which can be exploited by an attacker to cause a denial of service...

CVE-2023-41101

CVE-2023-41101 affects OpenNDS prior to 10.1.3. The vulnerability is in get_query() of http_microhttpd.c, which does not validate the length of the GET query string, leading to a stack-based overflow on 9.x and earlier and a heap-based overflow on 10.x and later. Impacted systems may crash (DoS) ...

openNDS Code Issues Vulnerabilities

openNDS is openNDS open source a high-performance, small footprint portal system. A code issue vulnerability exists in versions prior to openNDS 10.1.2 that stems from the presence of a NULL pointer dereference, which can be exploited by an attacker to cause a denial of service...

OpenNDS Code Issues Vulnerabilities

openNDS is openNDS open source a high-performance, small footprint portal system. A code issue vulnerability exists in OpenNDS versions prior to 10.1.2 that stems from the presence of a NULL pointer dereference, which can be exploited by an attacker to cause a denial of service...

CVE-2023-41102

An issue was discovered in the captive portal in OpenNDS before version 10.1.3. It has multiple memory leaks due to not freeing up allocated memory. This may lead to a Denial-of-Service condition due to the consumption of all available memory. Affected OpenNDS before version 10.1.3 fixed in OpenW...

CVE-2023-38315

An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a trytoauthenticate NULL pointer dereference that can be triggered with a crafted GET HTTP with a missing client token query string parameter. Triggering this issue results in crashing OpenNDS a Denial-of-Service...

CVE-2023-38316

An issue was discovered in OpenNDS Captive Portal before version 10.1.2. When the custom unescape callback is enabled, attackers can execute arbitrary OS commands by inserting them into the URL portion of HTTP GET requests. Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt...

CVE-2023-38324

An issue was discovered in OpenNDS before 10.1.2. It allows users to skip the splash page sequence and directly authenticate when it is using the default FAS key and OpenNDS is configured as FAS. Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt master, OpenWrt 23.05 and...

CVE-2023-38316

An issue was discovered in OpenNDS Captive Portal before version 10.1.2. When the custom unescape callback is enabled, attackers can execute arbitrary OS commands by inserting them into the URL portion of HTTP GET requests. Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt...

CVE-2023-38324

An issue was discovered in OpenNDS before 10.1.2. It allows users to skip the splash page sequence and directly authenticate when it is using the default FAS key and OpenNDS is configured as FAS. Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt master, OpenWrt 23.05 and...

CVE-2023-38320

An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a showpreauthpage NULL pointer dereference that can be triggered with a crafted GET HTTP with a missing User-Agent header. Triggering this issue results in crashing OpenNDS a Denial-of-Service condition. This problem...