CVE-2023-38315 Null dereference in n/a

High 7.5 Published 17 Nov 2023 Updated 2 Aug 2024

A crafted HTTP request triggers a null pointer dereference in OpenNDS, causing a denial of service by crashing the captive portal service.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2023-38315?

CVE-2023-38315 is a high-severity vulnerability in n/a, published on 17 Nov 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a try_to_authenticate NULL pointer dereference that can be triggered with a crafted GET HTTP with a missing client token query string parameter. Triggering this issue results in crashing OpenNDS (a Denial-of-Service condition). Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on 28. August 2023 by updating OpenNDS to version 10.1.3.

Weakness: CWE-476

Which versions are affected by CVE-2023-38315?

It affects 1 product.

Products include Opennds Captive Portal.

How do I fix CVE-2023-38315?

Upgrade to a fixed version.

Is CVE-2023-38315 being exploited?

There is no known exploitation of CVE-2023-38315 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2023-38315, GHSA-3w3w-vm78-84r8.