PT-2023-24351 · Unknown+3 · Readymedia+3

Hyprdudemellow-Hypehypr · Published 2020-12-10 · Updated 2025-01-08 · CVE-2023-33476

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ReadyMedia (MiniDLNA) versions 1.1.15 through 1.3.2

Description The issue is caused by incorrect validation logic when handling HTTP requests using chunked transport encoding. This results in other code later using attacker-controlled chunk values that exceed the length of the allocated buffer, resulting in out-of-bounds read/write. The vulnerability can be exploited for remote code execution.

Recommendations For ReadyMedia (MiniDLNA) versions 1.1.15 through 1.3.2, update to a version that fixes the buffer overflow issue. As a temporary workaround, consider restricting access to HTTP requests using chunked transport encoding until a patch is available.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALT-PU-2020-3483

ALT-PU-2022-1492

ALT-PU-2023-1921

ALT-PU-2024-3412

ALT-PU-2024-4163

CVE-2023-33476

DLA-3465-1

DSA-5434-1

MGASA-2023-0224

OPENSUSE-SU-2024:0093-1

OPENSUSE-SU-2024:14011-1

USN-6398-1

Affected Products

Alt Linux

Linuxmint

Readymedia

Ubuntu

References · 38

• 🔥 https://github.com/mellow-hype/cve-2023-33476 · Exploit
• 🔥 https://blog.coffinsec.com/0day/2023/05/31/minidlna-heap-overflow-rca.html · Exploit
• https://ubuntu.com/security/CVE-2023-33476 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-33476 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-33476 · Security Note
• https://debian.org/security/2023/dsa-5434 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-33476 · Security Note
• https://osv.dev/vulnerability/MGASA-2023-0224 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-33476 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5434-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:0093-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-33476 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14011-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6398-1 · Vendor Advisory
• https://security.gentoo.org/glsa/202311-12 · Vendor Advisory