CVE-2023-3036

CVSS V2 None CVSS V3 None
Description
An unchecked read in NTP server in github.com/cloudflare/cfnts prior to commit 783490b https://github.com/cloudflare/cfnts/commit/783490b913f05e508a492cd7b02e3c4ec2297b71  enabled a remote attacker to trigger a panic by sending an NTSAuthenticator packet with extension length longer than the packet contents.
Overview
  • CVE ID
  • CVE-2023-3036
  • Assigner
  • cloudflare
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-06-14T11:08:08.969Z
  • Last Modified Date
  • 2023-06-14T11:08:28.361Z
Weakness Enumerations
CWE URL
CWE-119 http://cwe.mitre.org/data/definitions/119.html
CWE-125 http://cwe.mitre.org/data/definitions/125.html
References
Reference URL Reference Tags
https://github.com/cloudflare/cfnts/security/advisories/GHSA-pwx6-gw47-96cp
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-3036
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3036
History
Created Old Value New Value Data Type Notes
2024-06-24 21:17:35 Added to TrackCVE