CVE-2023-31475

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An issue was discovered on GL.iNet devices before 3.216. The function guci2_get() found in libglutil.so has a buffer overflow when an item is requested from a UCI context, and the value is pasted into a char pointer to a buffer without checking the size of the buffer.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/gl-inet/CVE-issues/blob/main/3.215/Buffer_Overflow.mdExploit, Third Party Advisory
https://justinapplegate.me/2023/glinet-CVE-2023-31475/
https://www.gl-inet.comVendor Advisory
https://github.com/gl-inet/CVE-issues/blob/main/3.215/Buffer_Overflow.mdExploit, Third Party Advisory
https://justinapplegate.me/2023/glinet-CVE-2023-31475/
https://www.gl-inet.comVendor Advisory

Timeline

Published: May 11, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-314767.5An issue was discovered on GL.iNet devices running firmware before 3.216. There is an arbitrary file write in which an empty file can be cre CVE-2023-314777.5A path traversal issue was discovered on GL.iNet devices before 3.216. Through the file sharing feature, it is possible to share an arbitrar CVE-2023-314787.5An issue was discovered on GL.iNet devices before 3.216. An API endpoint reveals information about the Wi-Fi configuration, including the SS CVE-2023-31488.8A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0 and classified as critical. This issue affects some unknown pro CVE-2023-314837.5tar/TarFileReader.cpp in Cauldron cbang before bastet-v8.1.17 has a directory traversal during extraction that allows the attacker to create CVE-2023-314848.1CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.CVE-2023-314855.9GitLab::API::v4 through 0.26 does not verify TLS certificates when connecting to a GitLab server, enabling machine-in-the-middle attacks.CVE-2023-314868.1HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where u CVE-2023-314889.8Hyland Perceptive Filters releases before 2023-12-08 (e.g., 11.4.0.2647), as used in Cisco IronPort Email Security Appliance Software, Cisco CVE-2023-314895.5An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_capability_llgr() function.CVE-2023-31498.8A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0. It has been classified as critical. Affected is an unknown fun CVE-2023-314907.5An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_attr_psid_sub() function.