Log in Start free

Vulnerability · Published Jun 2, 2023 · Assigned by mitre

CVE-2023-33476

Critical 9.8

In plain English

A critical-severity out-of-bounds write in the minidlna package (Debian). Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 2.1% (higher than 81% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)2.1%top 18.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack tooling1Public PoC

Official description

ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by incorrect validation logic when handling HTTP requests using chunked transport encoding. This results in other code later using attacker-controlled chunk values that exceed the length of the allocated buffer, resulting in out-of-bounds read/write.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12minidlna1.3.0+dfsg-2.2+deb12u1DEBIAN-CVE-2023-33476
Debian:12minidlna1.3.0+dfsg-2.2+deb12u1DSA-5434-1
Debian:13minidlna1.3.2+dfsg-1.1DEBIAN-CVE-2023-33476
Debian:14minidlna1.3.2+dfsg-1.1DEBIAN-CVE-2023-33476
Ubuntu:22.04:LTSminidlna1.3.0+dfsg-2.1ubuntu0.1USN-6398-1
Ubuntu:22.04:LTSminidlna1.3.0+dfsg-2.1ubuntu0.1UBUNTU-CVE-2023-33476

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

Weakness: CWE-787 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References