How severe is CVE-2023-3766?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 5.9 out of 10.

What type of vulnerability is CVE-2023-3766?

This is classified as CWE-120, which is a common weakness in software security.

CVE-2023-3766 - MEDIUM Severity | CVSS 5.9

Vulnerability Description

A vulnerability was discovered in the odoh-rs rust crate that stems from faulty logic during the parsing of encrypted queries. This issue specifically occurs when processing encrypted query data received from remote clients and enables an attacker with knowledge of this vulnerability to craft and send specially designed encrypted queries to targeted ODOH servers running with odoh-rs. Upon successful exploitation, the server will crash abruptly, disrupting its normal operation and rendering the service temporarily unavailable.

Related Vulnerabilities

CVE-2017-18350

MEDIUM

CVSS:5.9(Medium)

bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer signedness error when the proxy server res...

CWE-1202017

CVE-2024-24456

MEDIUM

CVSS:5.9(Medium)

An E-RAB Release Command packet containing a malformed NAS PDU will cause the Athonet MME to immediately crash, potentially due to a buffer overflow.

CWE-1202024

CVE-2025-25523

MEDIUM

CVSS:5.9(Medium)

Buffer overflow vulnerability in Trendnet TEG-40128 Web Smart Switch v1(1.00.023) due to the lack of length verification, which is related to the mobile access point setup operation. The attacker can ...

CWE-1202025

CVE-2025-29032

MEDIUM

CVSS:5.9(Medium)

Tenda AC9 v15.03.05.19(6318) was discovered to contain a buffer overflow via the formWifiWpsOOB function.

CWE-1202025

CVE-2016-7422

MEDIUM

CVSS:6.0(Medium)

The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) v...

CWE-1202016

CVE-2016-8668

MEDIUM

CVSS:6.0(Medium)

The rocker_io_writel function in hw/net/rocker/rocker.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds read and QEMU process crash) by le...

CWE-1202016