Memory Leak in openNDS Before Version 11.0.0

Executive Summary

This vulnerability involves multiple memory leaks in openNDS versions before 11.0.0. An unauthenticated attacker on the captive portal network can exploit these leaks to exhaust all available memory on the device within minutes.

Useful 0 Not Useful 0

Detection Guidance

Detect memory exhaustion on the openNDS device by monitoring system memory usage with commands like 'free -m' or 'top'. Check for processes consuming excessive memory with 'ps aux --sort=-%mem'. Look for openNDS-related processes in 'ps aux | grep openNDS'.

Useful 0 Not Useful 0

Impact Analysis

The memory exhaustion can cause the device to become unresponsive or crash, disrupting network services and potentially leading to denial-of-service conditions for legitimate users.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade openNDS to version 11.0.0 or later to address the memory leaks. Restart the openNDS service after upgrade with 'systemctl restart opennds' or equivalent for your system.

Useful 0 Not Useful 0