Cloudflare Vulnerabilities and Affected Products
Vulnerabilities associated with cfnts.
Products
Clear product- WARP14 vulnerabilities
- octorpki9 vulnerabilities
- quiche9 vulnerabilities
- WARP Client4 vulnerabilities
- Wrangler4 vulnerabilities
- https://github.com/cloudflare/pingora3 vulnerabilities
- CIRCL2 vulnerabilities
- cloudflared2 vulnerabilities
- cfnts1 vulnerability
- Cloudflare WARP for Windows1 vulnerability
- Cloudflare-WordPress1 vulnerability
- goflow1 vulnerability
- gokey1 vulnerability
- https://github.com/cloudflare/pages-action1 vulnerability
- lol-html1 vulnerability
- lua-resty-json1 vulnerability
- miniflare1 vulnerability
- odoh-rs1 vulnerability
- tokio-boring1 vulnerability
- Universal SSL1 vulnerability
- workerd1 vulnerability
- workers-sdk1 vulnerability
- zlib1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-3036HIGH | Out of Bounds Slice index in cfnts leads to remote panicAn unchecked read in NTP server in github.com/cloudflare/cfnts prior to commit 783490b https://github.com/cloudflare/cfnts/commit/783490b913f05e508a492cd7b02e3c4ec2297b71 enabled a remote attacker to trigger a panic by sending an NTSAuthenticator packet with extension length longer than the packet contents. | CVSS8.6v3.1 | EPSS2.24% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |