Threat Investigation
Request a demo

CVE-2023-3036

High

Description

An unchecked read in NTP server in github.com/cloudflare/cfnts prior to commit 783490b https://github.com/cloudflare/cfnts/commit/783490b913f05e508a492cd7b02e3c4ec2297b71  enabled a remote attacker to trigger a panic by sending an NTSAuthenticator packet with extension length longer than the packet contents.

SeverityHigh
CVSS8.6
Exploit probability—
ProductCloudflare Cfnts
PublishedJun 14, 2023
First seenJun 14, 2023
Weakness typeCWE-119Memory buffer bounds errorCWE-125Out-of-bounds read

How to fix

Update
  • cloudflare cfnts2023-06-01 or later

Affected products

ProductAffected versionsFixed in
cloudflare cfntsv < 2023-06-012023-06-01

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.