CVE-2023-35788

Katalog CVE

CVSS 7.8 · High EPSS 0,53%

Kerentanan Out-of-bounds Write pada linux kernel, debian linux +6 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation.

Rincian

Terbit di NVD

16 Juni 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,53% peluang dieksploitasi; lebih tinggi dari 43,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.7 mailing list · patch
• https://git.kernel.org/linus/4d56304e5827c8cc8cc18c75343d283af7c4825c patch
• http://packetstormsecurity.com/files/174577/Kernel-Live-Patch-Security-Notice-LSN-0097-1.html advisory pihak ketiga · vdb entry
• https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html mailing list · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20230714-0002/ advisory pihak ketiga
• https://www.debian.org/security/2023/dsa-5448 advisory pihak ketiga
• https://www.debian.org/security/2023/dsa-5480 advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2023/06/17/1 exploit · mailing list
• https://www.openwall.com/lists/oss-security/2023/06/07/1 exploit · mailing list