Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2023-3036

Out of Bounds Slice index in cfnts leads to remote panic

Description

An unchecked read in NTP server in github.com/cloudflare/cfnts prior to commit 783490b https://github.com/cloudflare/cfnts/commit/783490b913f05e508a492cd7b02e3c4ec2297b71  enabled a remote attacker to trigger a panic by sending an NTSAuthenticator packet with extension length longer than the packet contents.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cloudflare cfnts

Default version status: unaffected

  • 0 to < < 783490baffected

References