CVE-2022-43343

Deeper analysis

N-Prolog version 1.91 contains a global buffer overflow vulnerability in the gettoken function within Main.c, classified under CWE-120. The flaw received a CVSS 3.1 score of 7.5, reflecting network attack vector, low attack complexity, and no requirements for authentication or user interaction, with the primary impact being high availability degradation while confidentiality and integrity remain unaffected.

An unauthenticated remote attacker can supply crafted input over the network to trigger the overflow, resulting in a crash or denial-of-service condition against the affected N-Prolog instance. The provided references point to the upstream GitHub issue tracker but contain no explicit mitigation guidance or patch details in the available information.

EPSS scores for the CVE reached a peak of 0.0514 before receding to the current value of 0.0408, indicating limited but observable exploitation interest after disclosure. No reports of in-the-wild exploitation or additional context such as AI/ML involvement are present in the supplied data.