CVE-2023-3036 Out of Bounds Slice index in cfnts leads to remote panic
A remote attacker can cause a panic in the cfnts library by sending a malformed NTSAuthenticator packet with an invalid extension length.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-3036?
CVE-2023-3036 is a high-severity denial of service vulnerability in Cloudflare cfnts, published on 14 Jun 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An unchecked read in NTP server in github.com/cloudflare/cfnts prior to commit 783490b https://github.com/cloudflare/cfnts/commit/783490b913f05e508a492cd7b02e3c4ec2297b71 enabled a remote attacker to trigger a panic by sending an NTSAuthenticator packet with extension length longer than the packet contents.
Which versions are affected by CVE-2023-3036?
It affects 1 product.
Products include Cloudflare Cfnts.
How do I fix CVE-2023-3036?
No fix has been published for CVE-2023-3036 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2023-3036 being exploited?
There is no known exploitation of CVE-2023-3036 in the wild and no public exploit code.
Sources
Also known as GHSA-pwx6-gw47-96cp.