Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:41005
HistoryJun 24, 2023 - 4:49 a.m.

Buffer Overflow

2023-06-2404:49:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
minidlna
buffer overflow
http requests
vulnerability
chunked transport
out-of-bounds

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

66.0%

JSON

minidlna is vulnerable to Buffer Overflow. The vulnerability is caused by incorrect validation logic when handling HTTP requests using chunked transport encoding resulting in an attacker to cause an out-of-bounds read/write.

Related

nvd 1
cve 1
mageia 1
openvas 5
debiancve 1
debian 2
nessus 5
prion 1
cvelist 1
ubuntucve 1
githubexploit 1
osv 3
ubuntu 1
gentoo 1
nvd
nvd
CVE-2023-33476
2023-06-02 14:15:09
cve
cve
CVE-2023-33476
2023-06-02 14:15:09
mageia
mageia
Updated minidlna packages fix security vulnerability
2023-07-07 08:54:45
openvas
openvas
openSUSE: Security Advisory for minidlna (openSUSE-SU-2024:0093-1)
2024-03-29 00:00:00
Mageia: Security Advisory (MGASA-2023-0224)
2023-07-10 00:00:00
Debian: Security Advisory (DSA-5434-1)
2023-06-22 00:00:00
debiancve
debiancve
CVE-2023-33476
2023-06-02 14:15:09
debian
debian
[SECURITY] [DLA 3465-1] minidlna security update
2023-06-21 19:04:10
[SECURITY] [DSA 5434-1] minidlna security update
2023-06-21 13:50:45
nessus
nessus
Debian DLA-3465-1 : minidlna - LTS security update
2023-06-22 00:00:00
Debian DSA-5434-1 : minidlna - security update
2023-06-22 00:00:00
openSUSE 15 Security Update : minidlna (openSUSE-SU-2024:0093-1)
2024-03-30 00:00:00
prion
prion
Buffer overflow
2023-06-02 14:15:00
cvelist
cvelist
CVE-2023-33476
2023-06-02 00:00:00
ubuntucve
ubuntucve
CVE-2023-33476
2023-06-02 00:00:00
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Readymedia Project Readymedia
2023-06-20 01:13:17
osv
osv
minidlna - security update
2023-06-21 00:00:00
minidlna - security update
2023-06-21 00:00:00
minidlna vulnerabilities
2023-09-27 09:39:41
ubuntu
ubuntu
ReadyMedia vulnerabilities
2023-09-27 00:00:00
gentoo
gentoo
MiniDLNA: Multiple Vulnerabilities
2023-11-25 00:00:00

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

66.0%

JSON
Related for VERACODE:41005
nvd1cve1mageia1openvas5debiancve1debian2nessus5prion1cvelist1ubuntucve1githubexploit1osv3ubuntu1gentoo1