CVE-2023-38322: Null Pointer Dereference
An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a dobinauth NULL pointer dereference that be triggered with a crafted GET HTTP request with a missing User-Agent HTTP header. Triggering this issue results in crashing OpenNDS (a Denial-of-Service condition). The issue occurs when the client is about to be authenticated, and can be triggered only when the BinAuth option is set. Affected OpenNDS Captive Portal before version 10.1.2 fixed in OpenWrt master, OpenWrt 23.05 and OpenWrt 22.03 on 28. August 2023 by updating OpenNDS to version 10.1.3.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-38322?
CVE-2023-38322 is a vulnerability in OpenNDS Captive Portal before version 10.1.2 that allows a NULL pointer dereference, leading to a Denial-of-Service condition.
How severe is CVE-2023-38322?
CVE-2023-38322 has a severity rating of 7.5 (high).
How can CVE-2023-38322 be triggered?
CVE-2023-38322 can be triggered with a crafted GET HTTP request with a missing User-Agent HTTP header.
What is the affected software version of CVE-2023-38322?
The affected software version of CVE-2023-38322 is OpenNDS Captive Portal up to and excluding version 10.1.2.
Is there a fix for CVE-2023-38322?
Yes, updating to OpenNDS Captive Portal version 10.1.2 or later fixes CVE-2023-38322.