CVE-2023-28753

CRITICAL 9.8

CVSS Score

9.8

EPSS Score

0.0%

EPSS Percentile

0th

netconsd prior to v0.2 was vulnerable to an integer overflow in its parse_packet function. A malicious individual could leverage this overflow to create heap memory corruption with attacker controlled data.

Vendor	facebook
Product	netconsd
Published	May 18, 2023
Last Updated	Jan 21, 2025

Stay Ahead of the Next One

Get instant alerts for facebook netconsd

Be the first to know when new critical vulnerabilities affecting facebook netconsd are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Facebook / netconsd

0.0 < 0.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

facebook.com: https://www.facebook.com/security/advisories/cve-2023-28753 github.com: https://github.com/facebook/netconsd/commit/9fc54edf54f7caea1189c2b979337ed37af2c60e