CVE-2023-38320 Null dereference in n/a

High 7.5 Published 17 Nov 2023 Updated 2 Aug 2024

A remote attacker can cause a denial of service in OpenNDS Captive Portal by sending a crafted HTTP GET request with a missing User-Agent header.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2023-38320?

CVE-2023-38320 is a high-severity vulnerability in n/a, published on 17 Nov 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a show_preauthpage NULL pointer dereference that can be triggered with a crafted GET HTTP with a missing User-Agent header. Triggering this issue results in crashing OpenNDS (a Denial-of-Service condition). This problem was fixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on 28. August 2023 by updating OpenNDS to version 10.1.3.

Weakness: CWE-476

Which versions are affected by CVE-2023-38320?

It affects 1 product.

Products include Opennds Captive Portal.

How do I fix CVE-2023-38320?

Upgrade to a fixed version.

Is CVE-2023-38320 being exploited?

There is no known exploitation of CVE-2023-38320 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2023-38320, GHSA-2hmr-w3hv-h898.