CVE-2023-41102: 
Linux Debian vulnerability analysis and mitigation

An issue was discovered in the captive portal in OpenNDS before version 10.1.3. The vulnerability (CVE-2023-41102) involves multiple memory leaks due to not freeing up allocated memory, which was discovered in August 2023. The vulnerability affects OpenNDS captive portal systems before version 10.1.3 (NVD, OpenNDS Release).

The vulnerability stems from memory leaks caused by passing allocated buffers into safeasprintf() without proper deallocation. The issue was identified in multiple components of the system, including showpreauthpage, markauth, authmon daemon, and encodeandredirecttosplashpage functions (OpenNDS Release).

The memory leaks can lead to a Denial-of-Service condition due to the consumption of all available memory, potentially affecting the stability and performance of the captive portal system (Ubuntu CVE).

The vulnerability has been fixed in OpenNDS version 10.1.3. Users are advised to upgrade to this version or later. The fix includes proper memory management and deallocation of resources in various components of the system (OpenNDS Release, OpenWrt Routing).