CVE-2023-32726CWE-754
Possible buffer overread from reading DNS responses
Low · published December 18, 2023
What it is
The vulnerability is caused by improper check for check if RDLENGTH does not overflow the buffer in response from DNS server.
The record
Technical detail
- CVSS v3.1
- 3.9 · LOW
- Vector
- CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00673 · 51.5th percentile
- Weakness
- CWE-754 · Improper Check for Unusual or Exceptional Conditions
- Published
- 2023-12-18T09:17Z
EPSS history
Timeline