CVE-2023-1380

Katalog CVE

CVSS 7.1 · High EPSS 16,5%

Kerentanan Out-of-bounds Read pada redhat enterprise linux, linux kernel +7 lainnya. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could occur when assoc_info->req_len data is bigger than the size of the buffer, defined as WL_EXTRA_BUF_MAX, leading to a denial of service.

Rincian

Terbit di NVD

27 Maret 2023

Terakhir diubah

18 September 2026

Status NVD

Modified

CVSS 3.1

7.1 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

16,5% peluang dieksploitasi; lebih tinggi dari 96,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=2177883 issue tracking · mitigasi · patch · advisory pihak ketiga
• https://lore.kernel.org/linux-wireless/20230309104457.22628-1-jisoo.jang%40yonsei.ac.kr/T/#u patch
• http://packetstormsecurity.com/files/173087/Kernel-Live-Patch-Security-Notice-LSN-0095-1.html advisory pihak ketiga · vdb entry
• http://packetstormsecurity.com/files/173757/Kernel-Live-Patch-Security-Notice-LSN-0096-1.html advisory pihak ketiga · vdb entry
• https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html mailing list · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20230511-0001/ advisory pihak ketiga
• https://www.debian.org/security/2023/dsa-5480 advisory pihak ketiga
• https://www.openwall.com/lists/oss-security/2023/03/14/1 mailing list · advisory pihak ketiga