Denial-of-Service Vulnerability in OpenNDS Captive Portal - CVE-2023-38322
Summary
UBUNTU-CVE-2023-38322: An issue was discovered in OpenNDS Captive Portal before version 10.1.2. Affects opennds versions 10.2.0+dfsg-1build2. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenNDS is an open-source captive portal solution that provides authentication and access control for users connecting to a network. It is widely used in various environments to manage user access and ensure secure connections. The package version 10.2.0+dfsg-1build2 is affected by a critical vulnerability that can lead to service disruption.
Vulnerability Detail
An issue was discovered in OpenNDS Captive Portal before version 10.1.2, which contains a NULL pointer dereference in the do_binauth function. This vulnerability can be triggered by sending a crafted GET HTTP request that lacks a User-Agent HTTP header. When exploited, this results in a Denial-of-Service condition, crashing the OpenNDS service. The vulnerability specifically occurs during the client authentication process when the BinAuth option is enabled, making it a significant risk for environments relying on this feature.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can disable the BinAuth option in your OpenNDS configuration to prevent the vulnerability from being exploited until you can apply the patch.
Conclusion
CVE-2023-38322 represents a significant vulnerability in OpenNDS Captive Portal that can lead to service disruptions. It is crucial for users to update to the patched version to mitigate the risk. Additionally, utilizing tools like Vulert can help in monitoring for such vulnerabilities in real-time.
See every vulnerability recorded for opennds →
FAQ
CVE-2023-38322 is a vulnerability in OpenNDS Captive Portal that allows for a Denial-of-Service attack due to a NULL pointer dereference.
If you are using OpenNDS versions prior to 10.1.3, your system is vulnerable. You can check your version using the command 'dpkg -l | grep opennds'.
Exploiting this vulnerability can lead to a Denial-of-Service condition, causing the OpenNDS service to crash and disrupting network access for users.
Yes, you can use Vulert to monitor your application for open-source vulnerabilities in real-time without needing to access the code directly.
The CVSS score for CVE-2023-38322 is 7.5, indicating a high severity level.
Related vulnerabilities
Recent vulnerabilities recorded for opennds.
