nvd-json-data-feeds/CVE-2023/CVE-2023-383xx/CVE-2023-38322.json

{
  "id": "CVE-2023-38322",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2023-11-17T06:15:33.720",
  "lastModified": "2023-11-17T13:58:59.840",
  "vulnStatus": "Awaiting Analysis",
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a do_binauth NULL pointer dereference that be triggered with a crafted GET HTTP request with a missing User-Agent HTTP header. Triggering this issue results in crashing OpenNDS (a Denial-of-Service condition). The issue occurs when the client is about to be authenticated, and can be triggered only when the BinAuth option is set."
    },
    {
      "lang": "es",
      "value": "Se descubri\u00f3 un problema en OpenNDS Captive Portal antes de la versi\u00f3n 10.1.2. Tiene una desreferencia de puntero NULL do_binauth que se activa con una solicitud GET HTTP manipulada a la que le falta un encabezado HTTP User-Agent. La activaci\u00f3n de este problema provoca el bloqueo de OpenNDS (una condici\u00f3n de denegaci\u00f3n de servicio). El problema ocurre cuando el cliente est\u00e1 a punto de ser autenticado y solo puede activarse cuando la opci\u00f3n BinAuth est\u00e1 configurada."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://github.com/openNDS/openNDS/releases/tag/v10.1.2",
      "source": "cve@mitre.org"
    }
  ]
}