Buffer Overflow Vulnerability in ReadyMedia by DIGI International
CVE-2023-33476
9.8CRITICAL
Key Information:
- Vendor
Readymedia Project
- Status
- Vendor
- CVE Published:
- 2 June 2023
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2023-33476?
The vulnerability in ReadyMedia arises from the improper validation of chunked HTTP requests. When handling these requests, the software fails to enforce the correct limits on chunk values provided by the attacker. Consequently, this can lead to the potential for out-of-bounds read and write operations, which may allow an attacker to manipulate the memory of the application, potentially leading to unauthorized actions or denial of service.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.