VULNERABILITY INTELLIGENCE

CVE-2023-3036

CVSS score8.6 HIGH
EPSS probability2.24%
CISA KEVNot currently listed
Published2023-06-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Description

An unchecked read in NTP server in github.com/cloudflare/cfnts prior to commit 783490b https://github.com/cloudflare/cfnts/commit/783490b913f05e508a492cd7b02e3c4ec2297b71  enabled a remote attacker to trigger a panic by sending an NTSAuthenticator packet with extension length longer than the packet contents.

Weakness classification

  • cna@cloudflare.com: CWE-119
  • nvd@nist.gov: CWE-125

Primary references