CVE-2023-28753
CRITICALnetconsd < 0.2 - Heap Memory Corruption via Integer Overflow in parse_packet
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2023-28753. PoCs published by pingjuiliao.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2023-28753, demonstrating an integer overflow vulnerability in the netconsole frag offset handling, leading to heap memory corruption. The exploit crafts a malicious message with a negative offset to trigger the overflow and corrupt heap metadata.
Description
netconsd prior to v0.2 was vulnerable to an integer overflow in its parse_packet function. A malicious individual could leverage this overflow to create heap memory corruption with attacker controlled data.
Exploits (1)
This repository contains a functional exploit for CVE-2023-28753, demonstrating an integer overflow vulnerability in the netconsole frag offset handling, leading to heap memory corruption. The exploit crafts a malicious message with a negative offset to trigger the overflow and corrupt heap metadata.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H