CVE-2023-39914
Last modified
CVE-2023-39914 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. NLnet Labs' bcder library up to and including version 0.7.2 panics while decoding certain invalid input data rather than rejecting the data with an error. This can affect both the actual decoding stage as well as accessing content of types that utilized delayed decoding.. EPSS estimates a 0.59% chance of exploitation in the next 30 days.
Description
NLnet Labs' bcder library up to and including version 0.7.2 panics while decoding certain invalid input data rather than rejecting the data with an error. This can affect both the actual decoding stage as well as accessing content of types that utilized delayed decoding.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Nlnetlabs | Bcder | < 0.7.3 |
References
- https://nlnetlabs.nl/downloads/bcder/CVE-2023-39914.txtVendor Advisory
- https://nlnetlabs.nl/downloads/bcder/CVE-2023-39914.txtVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-39914?
How severe is CVE-2023-39914?
How do I fix CVE-2023-39914?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-39908The PKCS11 module of the YubiHSM 2 SDK through 2023.01 does …7.5
- CVE-2023-39909Ericsson Network Manager before 23.2 mishandles Access Contr…8.8
- CVE-2023-3991An OS command injection vulnerability exists in the httpd ip…9.8
- CVE-2023-39910The cryptocurrency wallet entropy seeding mechanism used in …7.5
- CVE-2023-39912Zoho ManageEngine ADManager Plus before 7203 allows Help Des…4.9
- CVE-2023-39913Deserialization of Untrusted Data, Improper Input Validation…8.8
- CVE-2023-39915NLnet Labs' Routinator up to and including version 0.12.1 ma…7.5
- CVE-2023-39916NLnet Labs’ Routinator 0.9.0 up to and including 0.12.1 as w…6.5
- CVE-2023-39917Cross-Site Request Forgery (CSRF) vulnerability in Photo Gal…8.8
- CVE-2023-39918Unauth. Reflected Cross-Site Scripting (XSS) vulnerability i…6.1
- CVE-2023-39919Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabili…4.8
- CVE-2023-3992The PostX WordPress plugin before 3.0.6 does not sanitise an…6.1
Are you affected by CVE-2023-39914?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST