[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250363

 
 

909

 
 

196124

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2023-42753Date: (C)2023-09-27   (M)2024-05-10


An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : 7.8CVSS Score :
Exploit Score: 1.8Exploit Score:
Impact Score: 5.9Impact Score:
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: LOCALAccess Vector:
Attack Complexity: LOWAccess Complexity:
Privileges Required: LOWAuthentication:
User Interaction: NONEConfidentiality:
Scope: UNCHANGEDIntegrity:
Confidentiality: HIGHAvailability:
Integrity: HIGH 
Availability: HIGH 
  
Reference:
RHSA-2023:7370
RHSA-2023:7379
RHSA-2023:7382
RHSA-2023:7389
RHSA-2023:7411
RHSA-2023:7418
RHSA-2023:7539
RHSA-2023:7558
RHSA-2024:0089
RHSA-2024:0113
RHSA-2024:0134
RHSA-2024:0340
RHSA-2024:0346
RHSA-2024:0347
RHSA-2024:0371
RHSA-2024:0376
RHSA-2024:0378
RHSA-2024:0402
RHSA-2024:0403
RHSA-2024:0412
RHSA-2024:0461
RHSA-2024:0562
RHSA-2024:0563
RHSA-2024:0593
RHSA-2024:0999
http://packetstormsecurity.com/files/175963/Kernel-Live-Patch-Security-Notice-LSN-0099-1.html
https://access.redhat.com/security/cve/CVE-2023-42753
https://bugzilla.redhat.com/show_bug.cgi?id=2239843
https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html
https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
https://seclists.org/oss-sec/2023/q3/216
https://www.openwall.com/lists/oss-security/2023/09/22/10

CWE    1
CWE-787
OVAL    70
oval:org.secpod.oval:def:509085
oval:org.secpod.oval:def:96926
oval:org.secpod.oval:def:96925
oval:org.secpod.oval:def:1507031
...

© SecPod Technologies