CVE-2023-2860

Katalog CVE

CVSS 4.4 · Medium EPSS 0,33%

Kerentanan Out-of-bounds Read pada linux kernel. Skor CVSS 3.1 4.4 (Medium) menurut NVD.

Deskripsi (NVD)

An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. The flaw exists within the processing of seg6 attributes. The issue results from the improper validation of user-supplied data, which can result in a read past the end of an allocated buffer. This flaw allows a privileged local user to disclose sensitive information on affected installations of the Linux kernel.

Rincian

Terbit di NVD

24 Juli 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.4 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

0,33% peluang dieksploitasi; lebih tinggi dari 24,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=2218122 issue tracking · patch
• https://access.redhat.com/security/cve/CVE-2023-2860 advisory pihak ketiga
• https://www.zerodayinitiative.com/advisories/ZDI-CAN-18511 advisory pihak ketiga · vdb entry