What is CVE-2023-41102?

CVE-2023-41102 is a high-severity vulnerability in Opennds, classified under Missing Release of Memory after Effective Lifetime. CVSS score: 7.5/10. Published 2023-11-17.

How severe is CVE-2023-41102?

High severity. CVSS v3 base score is 7.5 out of 10.

Resource exhaustion in Opennds

CVE-2023-41102

An issue was discovered in the captive portal in OpenNDS before version 10.1.3. It has multiple memory leaks due to not freeing up allocated memory. This may lead to a Denial-of-Service condition due to the consumption of all available memory. Affected OpenNDS before version 10.1.3 fixed in OpenWrt master and OpenWrt 23.05 on 23. November by updating OpenNDS to version 10.2.0.

EPSS: 0.010 (58.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Opennds
N/a — versions n/a

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2023-41102?: CVE-2023-41102 is a high-severity vulnerability in Opennds, classified under Missing Release of Memory after Effective Lifetime. CVSS score: 7.5/10. Published 2023-11-17.
How severe is CVE-2023-41102?: High severity. CVSS v3 base score is 7.5 out of 10.