CVE-2023-30362: Buffer Overflow
Buffer Overflow vulnerability in coapsend function in libcoap library 4.3.1-103-g52cfd56 fixed in 4.3.1-120-ge242200 allows attackers to obtain sensitive information via malformed pdu.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
libcoapto a version that resolves this vulnerability.Fixed in 4.3.1-120-ge242200
Event History
Frequently Asked Questions
What is the severity of CVE-2023-30362?
CVE-2023-30362 has a high severity rating due to its potential to allow attackers to exploit a buffer overflow in the libcoap library.
How do I fix CVE-2023-30362?
To fix CVE-2023-30362, you should upgrade the libcoap library to version 4.3.1-120-ge242200 or later.
What is the impact of CVE-2023-30362?
The impact of CVE-2023-30362 includes the possibility for attackers to obtain sensitive information by sending malformed Protocol Data Units (PDUs) to the affected system.
Which versions of libcoap are affected by CVE-2023-30362?
CVE-2023-30362 affects libcoap versions prior to 4.3.1-120-ge242200.
What component of libcoap is vulnerable in CVE-2023-30362?
The vulnerable component in libcoap for CVE-2023-30362 is the coap_send function.