CVE-2023-3766
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
A vulnerability was discovered in the odoh-rs rust crate that stems from faulty logic during the parsing of encrypted queries. This issue occurs when processing encrypted query data received from remote clients, allowing an attacker to send specially crafted queries to targeted ODOH servers.
Risk Assessment
Exploitation of this vulnerability can lead to a server crash, disrupting normal service operation and causing temporary unavailability.
Recommendation
It is recommended to update the odoh-rs crate to the latest version to mitigate this vulnerability and to monitor server logs for potential attack attempts.
Original NVD description (English source)
A vulnerability was discovered in the odoh-rs rust crate that stems from faulty logic during the parsing of encrypted queries. This issue specifically occurs when processing encrypted query data received from remote clients and enables an attacker with knowledge of this vulnerability to craft and send specially designed encrypted queries to targeted ODOH servers running with odoh-rs. Upon successful exploitation, the server will crash abruptly, disrupting its normal operation and rendering the service temporarily unavailable.