| Name | CVE-2023-43628 |
| Description | An integer underflow vulnerability exists in the NTRIP Stream Parsing functionality of GPSd 3.25.1~dev. A specially crafted network packet can lead to memory corruption. An attacker can send a malicious packet to trigger this vulnerability. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|
| gpsd (PTS) | buster | 3.17-7 | fixed |
| bullseye | 3.22-4 | fixed |
| bookworm | 3.22-4.1 | fixed |
| sid, trixie | 3.25-3 | fixed |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|
| gpsd | source | (unstable) | (not affected) | | | |
Notes
- gpsd <not-affected> (Vulnerable code introduced later, cf bug #1057667)
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1860
Introduced by: https://gitlab.com/gpsd/gpsd/-/commit/6ccd477f5e21a45f6c52a21ad323c93e59aa2461
Introduced by: https://gitlab.com/gpsd/gpsd/-/commit/c1c1c2706c4f5b9bf3be437d0a8f0106ef00c5e7
Fixed by: https://gitlab.com/gpsd/gpsd/-/commit/3e5c6c28c422102dd453e31912e1e79d1f7ff7f2