CVE-2023-28753
netconsd prior to v0.2 was vulnerable to an integer overflow in its parse_packet function. A malicious individual could leverage this overflow to crea...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
netconsd prior to v0.2 was vulnerable to an integer overflow in its parse_packet function. A malicious individual could leverage this overflow to create heap memory corruption with attacker controlled data.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory facebook.com
- patch github.com