CVE-2023-28753
netconsd prior to v0.2 was vulnerable to an integer overflow in its parse_packet function. A malicious individual could leverage this overflow to crea...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
netconsd prior to v0.2 was vulnerable to an integer overflow in its parse_packet function. A malicious individual could leverage this overflow to create heap memory corruption with attacker controlled data.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory facebook.com
- patch github.com