CVE-2023-1877: 
PHP vulnerability analysis and mitigation

An integer overflow vulnerability exists in the boa updateConfigIntoFlash functionality of Realtek rtl819x Jungle SDK v3.4.11. The vulnerability was discovered in July 2024 and affects LevelOne WBR-6013 router and Realtek rtl819x Jungle SDK. The vulnerability has been assigned CVE-2023-45742 with a CVSS score of 7.2 (Talos Intelligence).

The vulnerability exists in the boa updateConfigIntoFlash functionality where no check is performed after fetching components used to calculate the allocation size for malloc. This can lead to an integer overflow when calculating compLenofheader*compRate, resulting in less space being allocated than required. The vulnerability manifests during the decompression phase, leading to a heap-based buffer overflow (Talos Intelligence).

A successful exploitation of this vulnerability can lead to arbitrary code execution on affected devices. The attacker can trigger this vulnerability by sending a specially crafted sequence of HTTP requests (Talos Intelligence).

Realtek has provided updated software to their customers to address this vulnerability. However, LevelOne has declined to patch the issues in their software. Users of affected LevelOne devices should consider implementing network-level protections to restrict access to the vulnerable functionality (Talos Intelligence).