CVE-2023-3773

Katalog CVE

CVSS 4.4 · Medium EPSS 0,25%

Kerentanan Out-of-bounds Read pada redhat enterprise linux, fedoraproject fedora +2 lainnya. Skor CVSS 3.1 4.4 (Medium) menurut NVD.

Deskripsi (NVD)

A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to cause a 4 byte out-of-bounds read of XFRMA_MTIMER_THRESH when parsing netlink attributes, leading to potential leakage of sensitive heap data to userspace.

Rincian

Terbit di NVD

25 Juli 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.4 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

0,25% peluang dieksploitasi; lebih tinggi dari 15,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2023-3773 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2218944 issue tracking · advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:6583
• https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html
• https://www.debian.org/security/2023/dsa-5492