GitHub Advisoryadvisory · PyPI

GHSA-82wx-rxf8-fxch PyPXE Buffer Overflow vulnerability

HIGH Published 2024-04-29 Modified 2024-08-02 Official page ↗
Aliases
CVE-2023-46960
Ecosystem
PyPI
Packages
PyPXE
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Weaknesses
CWE-120
Reviewed
2024-08-02

Affected packages

• PyPI PyPXE: <= 1.8.4 (no fix yet)

Description

Buffer Overflow vulnerability in PyPXE v.1.8.4 allows a remote attacker to cause a denial of service via the handle function in the tftp module.

Related

Alias · CVE (1)

  • CVE-2023-46960 Buffer Overflow vulnerability in PyPXE v.1.8.4 allows a remote attacker to cause a denial of service via the handle function in the tftp… vulnerability

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References