← back
CVE-2023-28753

CVE-2023-28753

CVSS 9.8 CRITICALEPSS 1.9%CWE-787
netconsd prior to v0.2 was vulnerable to an integer overflow in its parse_packet function. A malicious individual could leverage this overflow to create heap memory corruption with attacker controlled data.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Facebook · netconsd
public PoCs found — 1
githubgithub.com/pingjuiliao/CVE-2023-28753★ 0
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/facebook/netconsd/commit/9fc54edf54f7caea1189c2b979337ed37af2c60ehttps://www.facebook.com/security/advisories/cve-2023-28753