vulnerability

F5: CVE-2023-32067: K000135831: Node.js vulnerability CVE-2023-32067

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:C)

Published

Aug 11, 2023

Added

Jun 17, 2026

Modified

Jul 8, 2026

Description

c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP packet with a length of 0 and returns them to the target resolver. The target resolver erroneously interprets the 0 length as a graceful shutdown of the connection. This issue has been patched in version 1.19.1.

Solution

f5-bigip-upgrade-latest

References

CVE-2023-32067
https://attackerkb.com/topics/CVE-2023-32067
https://my.f5.com/manage/s/article/K000135831
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36348
CWE-400
EUVD-EUVD-2023-36348

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report