opennds vulnerabilities and fixes

Recent CVEs affecting opennds, with upgrade or downgrade steps. 7 tracked.

opennds has 7 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 6. Most recent: 2024-02-26. Highest priority: CVE-2023-38323 (score 61/100).

• CVE-2024-25763 MEDIUM 5.5 DOWNGRADE openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c.
• CVE-2023-41102 HIGH 7.5 UPGRADE An issue was discovered in the captive portal in OpenNDS before version 10.1.3
• CVE-2023-41101 CRITICAL 9.8 UPGRADE An issue was discovered in the captive portal in OpenNDS before version 10.1.3
• CVE-2023-38323 CRITICAL 9.8 UPGRADE An issue was discovered in OpenNDS before 10.1.3
• CVE-2023-38319 CRITICAL 9.8 UPGRADE An issue was discovered in OpenNDS before 10.1.3
• CVE-2023-38318 CRITICAL 9.8 UPGRADE An issue was discovered in OpenNDS before 10.1.3
• CVE-2023-38317 CRITICAL 9.8 UPGRADE An issue was discovered in OpenNDS before 10.1.3

FAQ

How do I fix opennds vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is opennds being exploited right now?

None of the tracked opennds CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which opennds CVE should I patch first?

CVE-2023-38323 currently ranks highest (61/100): An issue was discovered in OpenNDS before 10.1.3.

RSS feed for opennds · ← Back to latest CVEs