{"id":"CVE-2023-43771","aliases":["EUVD-2023-48148","GHSA-gm5r-p3x6-43h6","openSUSE-SU-2024:14316-1"],"status":"published","title":"In nqptp-message-handlers.c in nqptp before 1.2.3, crafted packets received on the control port...","description":"In nqptp-message-handlers.c in nqptp before 1.2.3, crafted packets received on the control port could crash the program.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AC:L/AV:L/A:H/C:N/I:N/PR:L/S:U/UI:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00242,"percentile":0.1548,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2023-09-22T00:00:00Z","modified":"2026-10-28T02:30:23Z","fixes":[{"ecosystem":"openSUSE:Tumbleweed","package":"nqptp","fixed_in":["1.2.4-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"nqptp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-1.1"}]}]}],"products":[{"vendor":"mikebrady","product":"not_quite_ptp"}],"references":[{"url":"https://github.com/mikebrady/nqptp/commit/b24789982d5cc067ecf6e8f3352b701d177530ec","tags":["x_transferred","Patch","fix"]},{"url":"https://github.com/mikebrady/nqptp/releases/tag/1.2.3","tags":["x_transferred","Release Notes","web"]},{"url":"https://github.com/mikebrady/nqptp/releases/tag/1.2.4","tags":["x_transferred","Release Notes","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-43771","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gm5r-p3x6-43h6"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/43xxx/CVE-2023-43771.json","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-43771","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-43771","description":"In nqptp-message-handlers.c in nqptp before 1.2.3, crafted packets received on the control port could crash the program.","status":"published","published":"2023-09-22T00:00:00Z","modified":"2024-09-25T13:12:43.158Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AC:L/AV:L/A:H/C:N/I:N/PR:L/S:U/UI:N","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:35:14.633899Z"}],"euvd":[{"id":"EUVD-2023-48148","description":"In nqptp-message-handlers.c in nqptp before 1.2.3, crafted packets received on the control port could crash the program.","status":"published","published":"2023-09-22T00:00:00Z","modified":"2024-09-25T13:12:43Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AC:L/AV:L/A:H/C:N/I:N/PR:L/S:U/UI:N","level":"medium"}],"updated_at":"2026-11-03T00:28:12.924195Z"}],"ghsa":[{"id":"GHSA-gm5r-p3x6-43h6","title":"In nqptp-message-handlers.c in nqptp before 1.2.3, crafted packets received on the control port...","description":"In nqptp-message-handlers.c in nqptp before 1.2.3, crafted packets received on the control port could crash the program.","status":"published","published":"2023-09-22T06:30:19Z","modified":"2024-04-04T07:48:18Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:56:54.849147Z"}],"nvd":[{"id":"CVE-2023-43771","description":"In nqptp-message-handlers.c in nqptp before 1.2.3, crafted packets received on the control port could crash the program.","status":"published","published":"2023-09-22T06:15:10.243Z","modified":"2026-06-17T06:26:24.983Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:08:29.595868Z"}],"osv":[{"id":"CVE-2023-43771","description":"In nqptp-message-handlers.c in nqptp before 1.2.3, crafted packets received on the control port could crash the program.","status":"published","published":"2023-09-22T00:00:00Z","modified":"2026-10-28T02:30:23.375553273Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AC:L/AV:L/A:H/C:N/I:N/PR:L/S:U/UI:N","level":"medium"}],"updated_at":"2026-11-02T15:44:33.792101Z"},{"id":"openSUSE-SU-2024:14316-1","title":"nqptp-1.2.4-1.1 on GA media","description":"These are all security issues fixed in the nqptp-1.2.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-09-05T00:00:00Z","modified":"2026-02-04T02:29:11.363383Z","updated_at":"2026-11-02T16:58:36.662953Z"}]}}