CVE-2023-46960: PyPXE Buffer Overflow vulnerability

April 29, 2024 (updated August 2, 2024)

Buffer Overflow vulnerability in PyPXE v.1.8.4 allows a remote attacker to cause a denial of service via the handle function in the tftp module.

References

github.com/advisories/GHSA-82wx-rxf8-fxch
github.com/pypxe/PyPXE
github.com/pypxe/PyPXE/issues/206
nvd.nist.gov/vuln/detail/CVE-2023-46960

Detect and mitigate CVE-2023-46960 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →