An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1~dev. A specially crafted network packet can lead to memory corruption. An attacker can send a malicious packet to trigger this vulnerability.
References
| Link | Resource |
|---|---|
| https://talosintelligence.com/vulnerability_reports/TALOS-2023-1860 | Exploit Third Party Advisory |
Configurations
History
11 Dec 2023, 15:24
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:gpsd_project:gpsd:3.25.1:dev:*:*:*:*:*:* | |
| First Time |
Gpsd Project gpsd
Gpsd Project |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| References | () https://talosintelligence.com/vulnerability_reports/TALOS-2023-1860 - Exploit, Third Party Advisory |
06 Dec 2023, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1~dev. A specially crafted network packet can lead to memory corruption. An attacker can send a malicious packet to trigger this vulnerability. |
05 Dec 2023, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
05 Dec 2023, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-05 12:15
Updated : 2023-12-11 15:24
NVD link : CVE-2023-43628
Mitre link : CVE-2023-43628
CVE.ORG link : CVE-2023-43628
JSON object : View
Products Affected
gpsd_project
- gpsd
CWE
CWE-191
Integer Underflow (Wrap or Wraparound)