PT-2023-28975 · Nqptp · Nqptp

Mikebrady · Published 2023-09-21 · Updated 2024-09-05 · CVE-2023-43771

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions nqptp versions prior to 1.2.3

Description The issue arises from crafted packets received on the control port, which could cause the program to crash. This occurs in the nqptp-message-handlers.c file.

Recommendations For versions prior to 1.2.3, update to version 1.2.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the control port to minimize the risk of exploitation.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2023-43771

OPENSUSE-SU-2024:14316-1

Affected Products

Nqptp

References · 11

• https://github.com/mikebrady/nqptp/commit/b24789982d5cc067ecf6e8f3352b701d177530ec · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2024:14316-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-43771 · Security Note
• https://osv.dev/vulnerability/CVE-2023-43771 · Vendor Advisory
• https://github.com/mikebrady/nqptp/releases/tag/1.2.3 · Note
• https://github.com/mikebrady/nqptp/releases/tag/1.2.4 · Note
• https://t.me/cvenotify/58391 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1705168062377287898 · Twitter Post
• https://twitter.com/CVEnew/status/1705097812415758806 · Twitter Post
• https://t.me/cvenotify/58412 · Telegram Post
• https://suse.com/security/cve/CVE-2023-43771 · Note