Vigie VulnDBEuropean-hosted Vulnerability DB
EN
Menu

CVE-2023-42753

Kernel: netfilter: potential slab-out-of-bound access due to integer underflow

HIGH 7.0

En bref

Source
NVD
EPSS
EPSS 0.51 % · centile 43 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
redhat
Statut NVD
Modified

Description

An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

Faiblesses (CWE)

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1HIGH 7.0CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hredhat
CVSS 3.1HIGH 7.0CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HNVD · secalert@redhat.com (Secondary)
CVSS 3.1HIGH 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HNVD · nvd@nist.gov (Primary)

Références européennes

Avis du CERT-FR

Configurations affectées (CPE NVD)

Produits affectés

ProduitVersions
Red Hat · Red Hat Enterprise Linux 7unaffected 0:3.10.0-1160.108.1.rt56.1259.el7 < *
Red Hat · Red Hat Enterprise Linux 7unaffected 0:3.10.0-1160.108.1.el7 < *
Red Hat · Red Hat Enterprise Linux 7
Red Hat · Red Hat Enterprise Linux 7.7 Advanced Update Supportunaffected 0:3.10.0-1062.85.1.el7 < *
Red Hat · Red Hat Enterprise Linux 8unaffected 0:4.18.0-513.11.1.rt7.313.el8_9 < *
Red Hat · Red Hat Enterprise Linux 8
Red Hat · Red Hat Enterprise Linux 8unaffected 0:4.18.0-513.11.1.el8_9 < *
Red Hat · Red Hat Enterprise Linux 8.2 Advanced Update Supportunaffected 0:4.18.0-193.120.1.el8_2 < *
Red Hat · Red Hat Enterprise Linux 8.2 Telecommunications Update Serviceunaffected 0:4.18.0-193.120.1.rt13.171.el8_2 < *
Red Hat · Red Hat Enterprise Linux 8.2 Telecommunications Update Serviceunaffected 0:4.18.0-193.120.1.el8_2 < *
Red Hat · Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions
Red Hat · Red Hat Enterprise Linux 8.2 Update Services for SAP Solutionsunaffected 0:4.18.0-193.120.1.el8_2 < *
Red Hat · Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 0:4.18.0-305.120.1.el8_4 < *
Red Hat · Red Hat Enterprise Linux 8.4 Telecommunications Update Serviceunaffected 0:4.18.0-305.120.1.rt7.196.el8_4 < *
Red Hat · Red Hat Enterprise Linux 8.4 Telecommunications Update Serviceunaffected 0:4.18.0-305.120.1.el8_4 < *
Red Hat · Red Hat Enterprise Linux 8.4 Update Services for SAP Solutionsunaffected 0:4.18.0-305.120.1.el8_4 < *
Red Hat · Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
Red Hat · Red Hat Enterprise Linux 8.6 Extended Update Support
Red Hat · Red Hat Enterprise Linux 8.6 Extended Update Supportunaffected 0:4.18.0-372.87.1.el8_6 < *
Red Hat · Red Hat Enterprise Linux 8.8 Extended Update Supportunaffected 0:4.18.0-477.36.1.el8_8 < *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD