{
  "cveId": "CVE-2023-41102",
  "url": "https://patchblox.com/security/cve/CVE-2023-41102",
  "summary": "CVE-2023-41102 is fixed in opennds on 1 platform by DEBIAN-CVE-2023-41102 (version 10.2.0\u002Bdfsg-1), released November 17, 2023. It is not reported as exploited. Patch Radar priority: High.",
  "title": "opennds: An issue was discovered in the captive portal in OpenNDS before version 10.1.3",
  "description": "An issue was discovered in the captive portal in OpenNDS before version 10.1.3. It has multiple memory leaks due to not freeing up allocated memory. This may lead to a Denial-of-Service condition due to the consumption of all available memory. Affected OpenNDS before version 10.1.3 fixed in OpenWrt master and OpenWrt 23.05 on 23. November by updating OpenNDS to version 10.2.0.",
  "published": "2023-11-17T06:15:34Z",
  "severity": "high",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00972,
  "epssPercentile": 0.62184,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "opennds",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "10.2.0\u002Bdfsg-1",
      "fix": "DEBIAN-CVE-2023-41102",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-41102",
      "released": "2023-11-17T06:15:34Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}