Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-43628

Опубликовано: 05 дек. 2023
Источник: nvd
CVSS3: 5.9
CVSS3: 7.5
EPSS Низкий

Описание

An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1~dev. A specially crafted network packet can lead to memory corruption. An attacker can send a malicious packet to trigger this vulnerability.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:gpsd_project:gpsd:3.25.1:dev:*:*:*:*:*:*

EPSS

Процентиль: 42%
0.00202
Низкий

5.9 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-191
CWE-191

Связанные уязвимости

CVSS3: 5.9
ubuntu
около 2 лет назад

An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1~dev. A specially crafted network packet can lead to memory corruption. An attacker can send a malicious packet to trigger this vulnerability.

CVSS3: 7.5
redhat
около 2 лет назад

An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1~dev. A specially crafted network packet can lead to memory corruption. An attacker can send a malicious packet to trigger this vulnerability.

CVSS3: 5.9
debian
около 2 лет назад

An integer underflow vulnerability exists in the NTRIP Stream Parsing ...

CVSS3: 5.9
github
около 2 лет назад

An integer overflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1~dev. A specially crafted network packet can lead to memory corruption. An attacker can send a malicious packet to trigger this vulnerability.

EPSS

Процентиль: 42%
0.00202
Низкий

5.9 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-191
CWE-191