CVE-2023-39914

CVSS V2 None CVSS V3 None

Description

NLnet Labs’ bcder library up to and including version 0.7.2 panics while decoding certain invalid input data rather than rejecting the data with an error. This can affect both the actual decoding stage as well as accessing content of types that utilized delayed decoding.

Overview

CVE ID
CVE-2023-39914

Assigner
NLnet Labs

Vulnerability Status
PUBLISHED

Published Version
2023-09-13T14:17:49.204Z

Last Modified Date
2023-09-13T14:17:49.204Z

Weakness Enumerations

CWE	URL
CWE-228	http://cwe.mitre.org/data/definitions/228.html

References

Reference URL	Reference Tags
https://nlnetlabs.nl/downloads/bcder/CVE-2023-39914.txt	vendor-advisory

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-39914
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39914

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 18:52:36				Added to TrackCVE