CVE-2023-2860CWE-125

Out-of-bounds read when setting hmac data

Medium · published July 24, 2023

CVSS v3.1
4.4
EPSS
0%
Percentile
24.7
In the wild
Unconfirmed
What it is

An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. The flaw exists within the processing of seg6 attributes. The issue results from the improper validation of user-supplied data, which can result in a read past the end of an allocated buffer. This flaw allows a privileged local user to disclose sensitive information on affected installations of the Linux kernel.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00329 · 24.7th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2023-07-24T15:19Z
EPSS history
Timeline
  • 24 JUL 15:19Z
    Out-of-bounds read when setting hmac data
    cvelistv5