CVE-2023-33476

ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by incorrect validation logic when handling HTTP requests using chunked transport encoding. This results in other code later using attacker-controlled chunk values that exceed the length of the allocated buffer, resulting in out-of-bounds read/write.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://blog.coffinsec.com/0day/2023/05/31/minidlna-heap-overflow-rca.html	Exploit Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/06/msg00027.html
https://security.gentoo.org/glsa/202311-12
https://sourceforge.net/p/minidlna/git/ci/9bd58553fae5aef3e6dd22f51642d2c851225aec/	Patch
https://sourceforge.net/projects/minidlna/	Product
https://www.debian.org/security/2023/dsa-5434
https://blog.coffinsec.com/0day/2023/05/31/minidlna-heap-overflow-rca.html	Exploit Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/06/msg00027.html
https://security.gentoo.org/glsa/202311-12
https://sourceforge.net/p/minidlna/git/ci/9bd58553fae5aef3e6dd22f51642d2c851225aec/	Patch
https://sourceforge.net/projects/minidlna/	Product
https://www.debian.org/security/2023/dsa-5434

Configurations

Configuration 1 (hide)

cpe:2.3:a:readymedia_project:readymedia:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2023-06-02 14:15

Updated : 2025-01-08 21:15

NVD link : CVE-2023-33476

Mitre link : CVE-2023-33476

CVE.ORG link : CVE-2023-33476

JSON object : View

Products Affected

readymedia_project

readymedia

CWE

CWE-787

Out-of-bounds Write

{"id": "CVE-2023-33476", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2023-06-02T14:15:09.437", "references": [{"url": "https://blog.coffinsec.com/0day/2023/05/31/minidlna-heap-overflow-rca.html", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00027.html", "source": "cve@mitre.org"}, {"url": "https://security.gentoo.org/glsa/202311-12", "source": "cve@mitre.org"}, {"url": "https://sourceforge.net/p/minidlna/git/ci/9bd58553fae5aef3e6dd22f51642d2c851225aec/", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "https://sourceforge.net/projects/minidlna/", "tags": ["Product"], "source": "cve@mitre.org"}, {"url": "https://www.debian.org/security/2023/dsa-5434", "source": "cve@mitre.org"}, {"url": "https://blog.coffinsec.com/0day/2023/05/31/minidlna-heap-overflow-rca.html", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00027.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://security.gentoo.org/glsa/202311-12", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://sourceforge.net/p/minidlna/git/ci/9bd58553fae5aef3e6dd22f51642d2c851225aec/", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://sourceforge.net/projects/minidlna/", "tags": ["Product"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.debian.org/security/2023/dsa-5434", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-787"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by incorrect validation logic when handling HTTP requests using chunked transport encoding. This results in other code later using attacker-controlled chunk values that exceed the length of the allocated buffer, resulting in out-of-bounds read/write."}], "lastModified": "2025-01-08T21:15:09.183", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:readymedia_project:readymedia:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E82430F4-2EB8-4A94-8946-E80D5C330F1B", "versionEndIncluding": "1.3.2", "versionStartIncluding": "1.1.15"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}