CVE-2023-30362 Information disclosure in n/a

High 7.5 Published 23 Jun 2023 Updated 5 Dec 2024

Attackers can obtain sensitive information via malformed packets in the libcoap library, requiring an upgrade to the fixed version.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2023-30362?

CVE-2023-30362 is a high-severity vulnerability in n/a, published on 23 Jun 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Buffer Overflow vulnerability in coap_send function in libcoap library 4.3.1-103-g52cfd56 fixed in 4.3.1-120-ge242200 allows attackers to obtain sensitive information via malformed pdu.

Weakness: CWE-125

Which versions are affected by CVE-2023-30362?

It affects 1 product.

Products include Libcoap Libcoap.

How do I fix CVE-2023-30362?

Upgrade to a fixed version.

Is CVE-2023-30362 being exploited?

There is no known exploitation of CVE-2023-30362 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2023-30362, GHSA-v5wr-22jp-335p, OESA-2023-1701, OESA-2023-1702, UBUNTU-CVE-2023-30362.