PT-2023-28975 · Nqptp · Nqptp

Mikebrady · CVE-2023-43771 · Published 2023-09-21 · Updated 2024-09-05

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AC:L/AV:L/A:H/C:N/I:N/PR:L/S:U/UI:N

Name of the Vulnerable Software and Affected Versions nqptp versions prior to 1.2.3

Description The issue arises from crafted packets received on the control port, which could cause the program to crash. This occurs in the nqptp-message-handlers.c file.

Recommendations For versions prior to 1.2.3, update to version 1.2.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the control port to minimize the risk of exploitation.

Exploit

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2023-43771

OPENSUSE-SU-2024:14316-1

Affected Products

Nqptp

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/43xxx/CVE-2023-43771.json · Exploit
• https://github.com/mikebrady/nqptp/commit/b24789982d5cc067ecf6e8f3352b701d177530ec · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2024:14316-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-43771 · Security Note
• https://osv.dev/vulnerability/CVE-2023-43771 · Vendor Advisory
• https://github.com/mikebrady/nqptp/releases/tag/1.2.4 · Note
• https://github.com/mikebrady/nqptp/releases/tag/1.2.3 · Note
• https://t.me/cvenotify/58412 · Telegram Post
• https://t.me/cvenotify/58391 · Telegram Post
• https://twitter.com/CVEnew/status/1705097812415758806 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1705168062377287898 · Twitter Post
• https://suse.com/security/cve/CVE-2023-43771 · Note