CVE-2023-38317

概要

参考情報

• openNDS/openNDS · Release Notes
• openNDS/openNDS release v10.1.3 · Release Notes
• openwrt.org/docs/guide-user/services/captive-portal/opennds · Product
• forescout.com/resources/sierra21-vulnerabilities · Exploit

opennds のその他の脆弱性

• CVE-2024-25763中 5.5openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c.
• CVE-2023-38323緊急 9.8An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the status path script entry in the configuration file, allowing atta…
• CVE-2023-38319緊急 9.8An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the FAS key entry in the configuration file, allowing attackers that …
• CVE-2023-38318緊急 9.8An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the gateway FQDN entry in the configuration file, allowing attackers …
• CVE-2023-41102高 7.5An issue was discovered in the captive portal in OpenNDS before version 10.1.3. It has multiple memory leaks due to not freeing up allocated…