CVE-2023-3036 — Out of Bounds Slice index in cfnts leads to remote panic

CVE-2023-3036

Out of Bounds Slice index in cfnts leads to remote panic PUBLISHED

Description (CNA)

An unchecked read in NTP server in github.com/cloudflare/cfnts prior to commit 783490b https://github.com/cloudflare/cfnts/commit/783490b913f05e508a492cd7b02e3c4ec2297b71 enabled a remote attacker to trigger a panic by sending an NTSAuthenticator packet with extension length longer than the packet contents.

Affected (CNA)

Vendor / product	Versions
Cloudflare / cfnts	affected 0 before < 783490b

CWE

CWE-119, CWE-125

References

https://github.com/cloudflare/cfnts/security/advisories/GHSA-pwx6-gw47-96cp

ADP enrichment

CVE

No English description supplied.

https://github.com/cloudflare/cfnts/security/advisories/GHSA-pwx6-gw47-96cp

CISA-ADP

No English description supplied.

No references supplied.