CVE-2023-33476
Critical
Description
ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by incorrect validation logic when handling HTTP requests using chunked transport encoding. This results in other code later using attacker-controlled chunk values that exceed the length of the allocated buffer, resulting in out-of-bounds read/write.
SeverityCritical
CVSS9.8
Exploit probability—
ProductReadymedia
PublishedJun 2, 2023
First seenJun 2, 2023
Weakness typeCWE-787Out-of-bounds write
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| readymedia_project readymedia | 1.1.15 ≤ v ≤ 1.3.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.